IBM Support

IC90422: DATAPOWER INCORRECTLY APPLIES XPATH EXPRESSION WHEN USING WS SECURITY POLICY SP:ENCRYPTEDELEMENTS ASSERTION

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When using WS Security (WS-Policy) sp:EncryptedElements
    assertion, DataPower might incorrectly apply the XPath
    expression. Below is a sample of the WS-Policy:
    
    <wsp:Policy wsu:Id="ec_policy">
      <wsp:ExactlyOne>
        <wsp:All>
       <sp:EncryptedElements
    xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200
    702">
    
    <sp:XPath>//*[local-name()='Body']//*[local-name()='data']</sp:X
    Path>
       </sp:EncryptedElements>
     </wsp:All>
      </wsp:ExactlyOne>
    </wsp:Policy>
    

Local fix

  • A simple workaround is to omit the leading
    "//*[local-name()='Body']" in the XPath
    

Problem summary

  • When using WS Security (WS-Policy) sp:EncryptedElements
    assertion, DataPower might incorrectly check for the required
    Encrypted Element when the XPath to identify the element
    contains "local-name()='Body'" used in conjunction
    with the Binding Assertion.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IC90422

  • Reported component name

    DTPWR INTGRAPL

  • Reported component ID

    DP905XI52

  • Reported release

    500

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-02-22

  • Closed date

    2013-07-24

  • Last modified date

    2013-09-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DTPWR INTGRAPL

  • Fixed component ID

    DP905XI52

Applicable component levels

  • R500 PSY

       UP

  • R600 PSY

       UP



Document information

More support for: WebSphere DataPower Integration Appliance XI52

Software version: 5.0.0

Reference #: IC90422

Modified date: 20 September 2013