[xmlsec] Removal of security headers after decryption

Aleksey Sanin aleksey at aleksey.com
Tue Jun 9 07:33:13 PDT 2009


Nope. xmlsec will not remove anything. It is up to the application
to do this.

Aleksey

Shlomo Yona wrote:
> Hello,
> 
>  
> 
> I used xmlsec to decrypt a SOAP message with encrypted data and I 
> noticed that the security header (wsse:Security element and its 
> descendants) is still there in the output.
> 
> Shouldn’t xmlsec remove the security header that is related to the 
> encrypted data parts of a SOAP message that it successfully handled?
> 
> If this behavior can be controlled, then how can I make xmlsec remove 
> such headers after decryption?
> 
>  
> 
> Thanks.
> 
>  
> 
> Shlomo
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec


More information about the xmlsec mailing list