[JIRA] (CPPXT-155) Block CipherReference in Decrypter class

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on CPPXT-155 ( https://shibboleth.atlassian.net/browse/CPPXT-155?atlOrigin=eyJpIjoiOGM3ZjY3OTllYmE1NDg0NDg2YjM1Yjk3MDgzNjRlYzciLCJwIjoiaiJ9 )

Re: Block CipherReference in Decrypter class ( https://shibboleth.atlassian.net/browse/CPPXT-155?atlOrigin=eyJpIjoiOGM3ZjY3OTllYmE1NDg0NDg2YjM1Yjk3MDgzNjRlYzciLCJwIjoiaiJ9 )

In parallel, I investigated the ability of the Santuario library to handle CipherReferences with remote URIs and as best I can determine, including under a debugger, the Santuario code appears to inadvertently not install the default URL resolver into the Cipher class' XSECEnv object. The Signature code is different and copies in the globally installed resolver.

With this fix that won’t matter anymore, but it does mitigate some of the concern.

( https://shibboleth.atlassian.net/browse/CPPXT-155#add-comment?atlOrigin=eyJpIjoiOGM3ZjY3OTllYmE1NDg0NDg2YjM1Yjk3MDgzNjRlYzciLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/CPPXT-155#add-comment?atlOrigin=eyJpIjoiOGM3ZjY3OTllYmE1NDg0NDg2YjM1Yjk3MDgzNjRlYzciLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100213- sha1:1fa7b87 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230109/b5e448bb/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b1516d30-b1aa-459a-9886-472a529d8dc5
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230109/b5e448bb/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-4341ae31-46e2-4911-903e-69f61d96ba77
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230109/b5e448bb/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-7e763f50-da03-4a2e-bc35-0b8d64df4036
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230109/b5e448bb/attachment-0005.png>