IBM Support

IV52954: XML Canonicalization does not work as expected.

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

APAR status

  • Closed as program error.

Error description

  • Error Message, as reported by customer:
    1, Canonicalization should not remove namespace attribute xmlns.
    Expected:
    <my:NodeSetElement
    xmlns:my="mySchema">hello</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema">here goes
    trouble</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema"></my:NodeSetElement>
    but got:
    <my:NodeSetElement>hello</my:NodeSetElement><my:NodeSetElement>h
    ere goes
    trouble</my:NodeSetElement><my:NodeSetElement></my:NodeSetElemen
    t>
    2, Canonicalization output does not match the sample output in
    C14N spec (http://www.w3.org/TR/xml-c14n, 3.3 Start and End
    Tags).
    Stack Trace, if applicable:
    N/A
    Other Error Information, as reported by customer:
    N/A
    

Local fix

  • N/A
    

Problem summary

  • XML Canonicalization does not work as expected.
    
    ERROR DESCRIPTION:
    The customer reported that Canonicalization should not remove
    namespace attribute xmlns.
    Expected:
    <my:NodeSetElement
    xmlns:my="mySchema">hello</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema">here goes
    trouble</my:NodeSetElement><my:NodeSetElement
    xmlns:my="mySchema"></my:NodeSetElement>
    but got:
    <my:NodeSetElement>hello</my:NodeSetElement><my:NodeSetElement>h
    ere goes
    trouble</my:NodeSetElement><my:NodeSetElement></my:NodeSetElemen
    t>
    
    In addition to that, we found more issues in C14N
    implementation.
    C14N output does not match the sample output in C14N spec
    (http://www.w3.org/TR/xml-c14n, 3.3 Start and End Tags):
    1, Namespace does not go before other attributes.
    2, Namespace prefixes from original document is not kept.
    3, Superfluous namespace declarations should be removed.
    

Problem conclusion

  • Improved IBM C14N implementation:
    1, Keep namespace attribute xmlns in the node.
    2, Namespace goes before other attributes.
    3, Retention of namespace prefixes from original document as
    required by C14N spec.
    4, Elimination of superfluous namespace declarations as required
    by C14N spec.
    
    The associated Austin CMVC defect is 115138.
    The associated RTC Problem Report is 57051.
    
    The fix was delivered for 160_SR16FP1, 626_SR8FP1,
    170_SR7FP1, and 727_SR1FP1.
    
    
    The fix will be available in ibmxmlcrypto.jar (level 20140515).
    

Temporary fix

Comments

APAR Information

  • APAR number

    IV52954

  • Reported component name

    JAVA SPEC REQUE

  • Reported component ID

    TIVOXML00

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-12-09

  • Closed date

    2014-05-20

  • Last modified date

    2014-05-28

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    JAVA SPEC REQUE

  • Fixed component ID

    TIVOXML00

Applicable component levels

  • R100 PSY

       UP



Document information

More support for: Tivoli Components - Java Security

Software version: 100

Reference #: IV52954

Modified date: 28 May 2014