Error in the WS-SecurityPolicy Schema

["Symon Chang" <schang@bluetitan.com>]

There are three minor problems in the WS-SecurityPolicy schema XSD file, oasis-wssx-ws-securitypolicy-1.0.xsd , version 2, http://www.oasis-open.org/apps/org/workgroup/ws-sx/document.php?document_id=16373.

 

1. Line #1,  ?xml version="1.0" encoding="utf-8"?>

Missing the “<” sign. It should be <?xml version="1.0" encoding="utf-8"?>

2. Line #11,          targetNamespace='http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-securitypolicy'

Mismatch with WS-SecurityPolicy spec v1.2, session 1.2. It should be:       targetNamespace='http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512'

3. Line #12,    xmlns:tns='http://docs.oasis-open.org/ws-sx/ws-trust/200512/ws-securitypolicy'

Mismatch with WS-SecurityPolicy spec v1.2, session 1.2. It should be:     xmlns:sp='http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512'

Consequently, all namespace prefix of tns should change to sp to match the spec and all the examples in the spec.

 

 

Symon Chang, CISSP

Sr. Security Architect

Blue Titan Software