Comment 1 for bug 1409124

Revision history for this message
Seth Arnold (seth-arnold) wrote :

I can't find any SymmetricBindingBuilder.java nor jar files in the rampart source package; are you confident this is the correct package?

The description of librampart0 indicates it is to be used with Axis2/c -- if you're performing audits, I suspect that would be a fruitful place to start. I reported SSL vulnerabilities to them 1.5 years ago and never got a response. I suspect security is not a top priority for these projects.

Thanks