WS-Security: axis, cxf使用wss4j的中文处理问题

就我碰到的，中文问题主要是2个:

1) 传出的字符乱码

2) 出现如下异常:

[quote]org.apache.ws.security.WSSecurityException: The signature or decryption was invalid; nested exception is:

org.apache.xml.security.encryption.XMLEncryptionException: [color=red]An invalid XML character (Unicode: 0x10) was found in the element content of the document.[/color]

Original Exception was org.xml.sax.SAXParseException: An invalid XML character (Unicode: 0x10) was found in the element content of the document.

at org.apache.ws.security.processor.EncryptedKeyProcessor.decryptDataRef(EncryptedKeyProcessor.java:431)

at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:342)

at org.apache.ws.security.processor.EncryptedKeyProcessor.handleEncryptedKey(EncryptedKeyProcessor.java:92)

at org.apache.ws.security.processor.EncryptedKeyProcessor.handleToken(EncryptedKeyProcessor.java:80)

at org.apache.ws.security.WSSecurityEngine.processSecurityHeader(WSSecurityEngine.java:311)[/quote]

升级wss4j到1.5.5可解决问题，主要有2个jar包需要替换：以1.5.4到1.5.5为例

1) wss4j-1.5.4.jar -> wss4j-1.5.5.jar

2) xmlsec-1.4.0.jar -> xmlsec-1.4.2.jar

中文处理问题可能与xmlsec-1.4.0的一个问题有关:

[quote]Xml canonization - UTF-8 encoding issue in Xml security 1.4.0.

Committed by RB. Thanks to Karol Rewera. See Issue [url=http://issues.apache.org/bugzilla/show_bug.cgi?id=41462]41462[/url][/quote]

该问题在xmlsec-1.4.1中解决。

Apache XML Security History of Changes:

[url=http://santuario.apache.org/changes.html]http://santuario.apache.org/changes.html[/url]