From mmoore@example.org Wed Oct 07 20:38:04 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 34408 invoked from network); 7 Oct 2009 20:38:03 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 7 Oct 2009 20:38:03 -0000 Received: (qmail 11996 invoked by uid 500); 7 Oct 2009 20:38:03 -0000 Delivered-To: mmoore@example.org Received: (qmail 11887 invoked by uid 500); 7 Oct 2009 20:38:02 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 11877 invoked by uid 99); 7 Oct 2009 20:38:02 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Oct 2009 20:38:02 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of mmoore@example.org designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO kuber.nabble.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Oct 2009 20:37:51 +0000 Received: from isper.nabble.com ([83.161.120.155]) by kuber.nabble.com with esmtp (Exim 4.63) (envelope-from <mmoore@example.org>) id 1MvdGM-0006rh-EY for mmoore@example.org; Wed, 07 Oct 2009 13:37:30 -0700 Message-ID: <mmoore@example.org> Date: Wed, 7 Oct 2009 13:37:30 -0700 (PDT) From: jaybytez <mmoore@example.org> To: mmoore@example.org Subject: Running TestWSSecurityNewST2 - Caused by: org.apache.ws.security.WSSecurityException: General security error (No certificates were found for SAML signature) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Nabble-From: mmoore@example.org X-Virus-Checked: Checked by ClamAV on apache.org I am trying to run the TestWSSecurityNewST2 and I get "org.apache.ws.security.WSSecurityException: General security error (No certificates were found for SAML signature)" on each one of the methods. I am currently trying to use WSS4J with Spring to build SAML Assertions and I get the same exceptions. Any thoughts? Thanks...jay [INFO] Scanning for projects... [INFO] ------------------------------------------------------------------------ [INFO] Building Ping Web Service Client [INFO] [INFO] Id: com.foo:ping.ws-saml:jar:0.0.1-SNAPSHOT [INFO] task-segment: [package] [INFO] ------------------------------------------------------------------------ [INFO] [resources:resources] [INFO] Using default encoding to copy filtered resources. url = http://repo1.maven.org/maven2 Downloading: http://repo1.maven.org/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://static.appfuse.org/repository Downloading: http://static.appfuse.org/repository/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://repository.jboss.com/maven2 Downloading: http://repository.jboss.com/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom [INFO] [compiler:compile] [INFO] Compiling 10 source files to /home/a068071/Public/Development/eclipse3.5-workspace/ping.ws-saml/target/classes url = http://repo1.maven.org/maven2 Downloading: http://repo1.maven.org/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://static.appfuse.org/repository Downloading: http://static.appfuse.org/repository/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://repository.jboss.com/maven2 Downloading: http://repository.jboss.com/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom [INFO] [jibx:bind] [INFO] Not running JiBX binding compiler (single-module mode) - no binding files [INFO] [resources:testResources] [INFO] Using default encoding to copy filtered resources. url = http://repo1.maven.org/maven2 Downloading: http://repo1.maven.org/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://static.appfuse.org/repository Downloading: http://static.appfuse.org/repository/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://repository.jboss.com/maven2 Downloading: http://repository.jboss.com/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom [INFO] [compiler:testCompile] [INFO] Compiling 4 source files to /home/a068071/Public/Development/eclipse3.5-workspace/ping.ws-saml/target/test-classes url = http://repo1.maven.org/maven2 Downloading: http://repo1.maven.org/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://static.appfuse.org/repository Downloading: http://static.appfuse.org/repository/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom url = http://repository.jboss.com/maven2 Downloading: http://repository.jboss.com/maven2/com/sun/xml/wss/xws-security/2.0-FCS/xws-security-2.0-FCS.pom [INFO] [surefire:test] [INFO] Surefire report directory: /home/a068071/Public/Development/eclipse3.5-workspace/ping.ws-saml/target/surefire-reports DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded ------------------------------------------------------- T E S T S ------------------------------------------------------- Running wssec.TestWSSecurityNewST2 DEBUG [security.util.Loader] Trying to find [saml.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. INFO [security.saml.SAMLIssuerFactory] Using Crypto Engine [org.apache.ws.security.saml.SAMLIssuerImpl] DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.saml.SAMLIssuerImpl] Begin add SAMLAssertion token... INFO [wssec.TestWSSecurityNewST2] Before SAMLSignedSenderVouches.... DEBUG [security.saml.WSSecSignatureSAML] Beginning ST signing... DEBUG [security.util.Loader] Trying to find [saml.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. INFO [security.saml.SAMLIssuerFactory] Using Crypto Engine [org.apache.ws.security.saml.SAMLIssuerImpl] DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.saml.SAMLIssuerImpl] Begin add SAMLAssertion token... INFO [wssec.TestWSSecurityNewST2] Before SAMLSignedSenderVouches.... DEBUG [security.saml.WSSecSignatureSAML] Beginning ST signing... DEBUG [security.util.Loader] Trying to find [saml3.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. INFO [security.saml.SAMLIssuerFactory] Using Crypto Engine [org.apache.ws.security.saml.SAMLIssuerImpl] DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.saml.SAMLIssuerImpl] Begin add SAMLAssertion token... INFO [wssec.TestWSSecurityNewST2] Before SAMLSignedSenderVouches.... DEBUG [security.saml.WSSecSignatureSAML] Beginning ST signing... DEBUG [security.util.Loader] Trying to find [saml.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. INFO [security.saml.SAMLIssuerFactory] Using Crypto Engine [org.apache.ws.security.saml.SAMLIssuerImpl] DEBUG [security.util.Loader] Trying to find [crypto.properties] using sun.misc.Launcher$AppClassLoader@133056f class loader. DEBUG [components.crypto.CryptoFactory] Using Crypto Engine [org.apache.ws.security.components.crypto.Merlin] DEBUG [components.crypto.AbstractCrypto] CA certs have been loaded DEBUG [security.saml.SAMLIssuerImpl] Begin add SAMLAssertion token... DEBUG [security.saml.WSSecSignatureSAML] Beginning ST signing... Tests run: 4, Failures: 0, Errors: 4, Skipped: 0, Time elapsed: 0.222 sec <<< FAILURE! Results : Tests in error: testSAMLSignedSenderVouches(wssec.TestWSSecurityNewST2) testSAMLSignedSenderVouchesKeyIdentifier(wssec.TestWSSecurityNewST2) testDefaultIssuerClass(wssec.TestWSSecurityNewST2) testWSS62(wssec.TestWSSecurityNewST2) Tests run: 5, Failures: 0, Errors: 5, Skipped: 0 [ERROR] Mojo: org.apache.maven.plugins:maven-surefire-plugin:2.4.2:test FAILED for project: com.foo:ping.ws-saml:jar:0.0.1-SNAPSHOT Reason: There are test failures. Please refer to /home/jay/Public/Development/eclipse3.5-workspace/ping.ws-saml/target/surefire-reports for the individual test results. [INFO] ------------------------------------------------------------------------ [INFO] For more information, run with the -e flag [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILED [INFO] ------------------------------------------------------------------------ [INFO] Total time: 16 seconds [INFO] Finished at: Wed Oct 07 13:29:03 PDT 2009 [INFO] Final Memory: 4M/25M [INFO] ------------------------------------------------------------------------ -- View this message in context: http://www.nabble.com/Running-TestWSSecurityNewST2---Caused-by%3A-org.apache.ws.security.WSSecurityException%3A-General-security-error-%28No-certificates-were-found-for-SAML-signature%29-tp25793959p25793959.html Sent from the WSS4J mailing list mmoore@example.org. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Mon Oct 12 08:36:57 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 20275 invoked from network); 12 Oct 2009 08:36:57 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 12 Oct 2009 08:36:57 -0000 Received: (qmail 4346 invoked by uid 500); 12 Oct 2009 08:36:56 -0000 Delivered-To: mmoore@example.org Received: (qmail 4210 invoked by uid 500); 12 Oct 2009 08:36:55 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 4201 invoked by uid 99); 12 Oct 2009 08:36:55 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Oct 2009 08:36:55 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Oct 2009 08:36:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 6F38F234C48C for <mmoore@example.org>; Mon, 12 Oct 2009 01:36:31 -0700 (PDT) Message-ID: <592206408.1255336591454.JavaMail.jira@brutus> Date: Mon, 12 Oct 2009 01:36:31 -0700 (PDT) From: "Thilina Buddhika (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-204) Support validating SAML 2.0 tokens In-Reply-To: <930063520.1249579694835.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/WSS-204?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thilina Buddhika updated WSS-204: --------------------------------- Attachment: wss4j.patch Hi, I have attached an improved version of the SAML 2.0 validation patch. It would be really helpful, if we can get this patch verified and applied since Rampart 1.5 is released with the SAML 2.0 token issuance support. Thanks. /thilina > Support validating SAML 2.0 tokens > ---------------------------------- > > Key: WSS-204 > URL: https://issues.apache.org/jira/browse/WSS-204 > Project: WSS4J > Issue Type: New Feature > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Thilina Buddhika > Assignee: Ruchith Udayanga Fernando > Attachments: wss4j.patch > > > With the patch submitted for Rampart-231, SAML 2.0 support will be available for Rampart. That patch only generates SAML 2.0 tokens as per the SAML Token Profile 1.1 specification. SAML 2.0 validation support is mandatory for the full completion of SAML 2.0 support in Rampart. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Mon Oct 12 08:36:58 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 20385 invoked from network); 12 Oct 2009 08:36:57 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 12 Oct 2009 08:36:57 -0000 Received: (qmail 4625 invoked by uid 500); 12 Oct 2009 08:36:57 -0000 Delivered-To: mmoore@example.org Received: (qmail 4525 invoked by uid 500); 12 Oct 2009 08:36:57 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 4380 invoked by uid 99); 12 Oct 2009 08:36:56 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Oct 2009 08:36:56 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Oct 2009 08:36:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 6898F234C1EE for <mmoore@example.org>; Mon, 12 Oct 2009 01:36:31 -0700 (PDT) Message-ID: <1999542758.1255336591427.JavaMail.jira@brutus> Date: Mon, 12 Oct 2009 01:36:31 -0700 (PDT) From: "Thilina Buddhika (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-204) Support validating SAML 2.0 tokens In-Reply-To: <930063520.1249579694835.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/WSS-204?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Thilina Buddhika updated WSS-204: --------------------------------- Attachment: (was: wss4j.patch) > Support validating SAML 2.0 tokens > ---------------------------------- > > Key: WSS-204 > URL: https://issues.apache.org/jira/browse/WSS-204 > Project: WSS4J > Issue Type: New Feature > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Thilina Buddhika > Assignee: Ruchith Udayanga Fernando > Attachments: wss4j.patch > > > With the patch submitted for Rampart-231, SAML 2.0 support will be available for Rampart. That patch only generates SAML 2.0 tokens as per the SAML Token Profile 1.1 specification. SAML 2.0 validation support is mandatory for the full completion of SAML 2.0 support in Rampart. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Thu Oct 15 09:30:13 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 42391 invoked from network); 15 Oct 2009 09:30:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Oct 2009 09:30:13 -0000 Received: (qmail 80325 invoked by uid 500); 15 Oct 2009 09:30:13 -0000 Delivered-To: mmoore@example.org Received: (qmail 80226 invoked by uid 500); 15 Oct 2009 09:30:12 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 80217 invoked by uid 99); 15 Oct 2009 09:30:12 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 09:30:12 +0000 X-ASF-Spam-Status: No, hits=-8.0 required=10.0 tests=RCVD_IN_DNSWL_HI,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [83.161.120.155] (HELO chmail12.zurich.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 09:29:59 +0000 Received: from ([83.161.120.155]) by chmail12.zurich.com with SMTP id 5503490.82770315; Thu, 15 Oct 2009 11:29:23 +0200 Received: from CENDM0086.emea.zurich.corp ([83.161.120.155]) by chmails11.zurich.com (Totemo SMTP Server) with SMTP ID 810 for <mmoore@example.org>; Thu, 15 Oct 2009 11:29:23 +0200 (CEST) Subject: SAML processing, unable to locate an implementation of specified statement type To: mmoore@example.org X-Mailer: Lotus Notes Release 6.5.5 CCH6 September 22, 2006 Message-ID: <mmoore@example.org> From: Oliver Wulff <mmoore@example.org> Date: Thu, 15 Oct 2009 11:29:16 +0200 X-MIMETrack: Serialize by Router on CHKNH023/Zurich-Internet(Release 8.0.2 HF150|October 15, 2008) at 15.10.2009 11:29:27 MIME-Version: 1.0 Content-transfer-encoding: quoted-printable Content-Type: text/plain; charset="ISO-8859-1" X-Virus-Checked: Checked by ClamAV on apache.org =0D=0A<img=0Asrc=3D"http://zdownload=2Ezurich=2Ecom/mailimages/ZHP_MailHead= er=2Egif" />=0D=0A=0D=0AHi there=0D=0A=0D=0AI use CXF version 2=2E2 which u= ses WSS4J 1=2E5=2E8 which itself depends on=0D=0Aopensaml 1=2E1=2E=0D=0A=0D= =0AI've sent the following soap request to a CXF endpoint where the=0D=0AWS= -SecurityPolicy enforces an issued token=2E Unfortunately, I get an error= =0D=0Athat the specified statement type is not supported=2E=0D=0A=0D=0AExam= ple request:=0D=0A=0D=0A<soapenv:Envelope xmlns:soapenv=3D"http://schemas= =2Exmlsoap=2Eorg/soap/envelope/"=0D=0Axmlns:typ=3D"http://apache=2Eorg/hell= o_world_soap_http/types">=0D=0A <soapenv:Header>=0D=0A <wsse:Securit= y soapenv:mustUnderstand=3D"1"=0D=0Axmlns:wsse=3D"http://docs=2Eoasis-open= =2Eorg/wss/2004/01/oasis-200401-wss-wssecurity-secext-1=2E0=2Exsd">=0D=0A = <Assertion MinorVersion=3D"1" MajorVersion=3D"1" Issuer=3D"Security= =0D=0AToken Service" IssueInstant=3D"2009-10-15T08:18:43=2E832Z"=0D=0AAsser= tionID=3D"id-f95c6d2d-7586-47d4-8884-f9cc14a52a34"=0D=0Axmlns:ns8=3D"http:/= /schemas=2Eiona=2Ecom/saml2"=0D=0Axmlns:ns7=3D"http://www=2Ew3=2Eorg/2001/0= 4/xmlenc#"=0D=0Axmlns:ns6=3D"urn:oasis:names:tc:SAML:2=2E0:assertion"=0D=0A= xmlns:ns5=3D"http://docs=2Eoasis-open=2Eorg/wss/2004/01/oasis-200401-wss-ws= security-secext-1=2E0=2Exsd"=0D=0A=0D=0Axmlns:ns4=3D"http://docs=2Eoasis-op= en=2Eorg/wss/2004/01/oasis-200401-wss-wssecurity-utility-1=2E0=2Exsd"=0D=0A= xmlns:ns3=3D"http://schemas=2Eiona=2Ecom/saml"=0D=0Axmlns:ns2=3D"http://ww= w=2Ew3=2Eorg/2000/09/xmldsig#"=0D=0Axmlns=3D"urn:oasis:names:tc:SAML:1=2E0:= assertion">=0D=0A <Statement xsi:type=3D"ns3:AssertionMetadataTy= pe"=0D=0Axmlns:xsi=3D"http://www=2Ew3=2Eorg/2001/XMLSchema-instance">=0D=0A= <ns3:SessionDuration>0</ns3:SessionDuration>=0D=0A = </Statement>=0D=0A <AttributeStatement>=0D=0A <S= ubject>=0D=0A <NameIdentifier>alice</NameIdentifier>=0D=0A= <SubjectConfirmation>=0D=0A=0D=0A<ConfirmationMethod>urn:= oasis:names:tc:SAML:1=2E0:cm:sender-vouches</ConfirmationMethod>=0D=0A = </SubjectConfirmation>=0D=0A </Subject>=0D=0A = <Attribute=0D=0AAttributeNamespace=3D"http://schemas=2Eiona=2Ec= om/soa/security/saml-assertion-ext=2Exsd"=0D=0A AttributeName=3D"realms">= =0D=0A <AttributeValue xsi:type=3D"ns3:RealmAttributeValue= Type"=0D=0Axmlns:xsi=3D"http://www=2Ew3=2Eorg/2001/XMLSchema-instance">=0D= =0A <ns3:Realm name=3D"IONAGlobalRealm" desc=3D"">=0D= =0A <ns3:Role name=3D"guest" desc=3D""/>=0D=0A = </ns3:Realm>=0D=0A <ns3:Realm name=3D"co= rporate" desc=3D"">=0D=0A <ns3:Role name=3D"presiden= t" desc=3D""/>=0D=0A </ns3:Realm>=0D=0A = </AttributeValue>=0D=0A </Attribute>=0D=0A </Att= ributeStatement>=0D=0A <ds:Signature xmlns:ds=3D"http://www=2Ew3= =2Eorg/2000/09/xmldsig#">=0D=0A <ds:SignedInfo>=0D=0A = <ds:CanonicalizationMethod=0D=0AAlgorithm=3D"http://www=2Ew3=2Eor= g/2001/10/xml-exc-c14n#"/>=0D=0A <ds:SignatureMethod=0D=0A= Algorithm=3D"http://www=2Ew3=2Eorg/2000/09/xmldsig#rsa-sha1"/>=0D=0A = <ds:Reference=0D=0AURI=3D"#id-f95c6d2d-7586-47d4-8884-f9cc14a52a= 34">=0D=0A <ds:Transforms>=0D=0A = <ds:Transform=0D=0AAlgorithm=3D"http://www=2Ew3=2Eorg/2000/09/xmldsig#enve= loped-signature"/>=0D=0A <ds:Transform=0D=0AAlgorith= m=3D"http://www=2Ew3=2Eorg/2001/10/xml-exc-c14n#"/>=0D=0A = </ds:Transforms>=0D=0A <ds:DigestMethod=0D=0AAlgorit= hm=3D"http://www=2Ew3=2Eorg/2000/09/xmldsig#sha1"/>=0D=0A=0D=0A<ds:DigestVa= lue>Km83fx/zBg07cVq6Ef8seyXanu0=3D</ds:DigestValue>=0D=0A = </ds:Reference>=0D=0A </ds:SignedInfo>=0D=0A=0D=0A<ds:Signatu= reValue>S1ZZn10KLokaJ8GvgeUotlPyfxvMWBumQAQyAAaVb1BigZHY7qVHwP9XepWTqKZ9g9T= QKwEwN4tB=0D=0ATFwAYLNApt4KQcmXazn5NEntxa7RSUwf3ovYcGeAn1bH0Uh35qkVJAPAvuEE= efAbMHWVSIxVE9dw=0D=0A8ANENnH+hxdpprQX/Is=3D</ds:SignatureValue>=0D=0A = <KeyInfo=0D=0Axmlns:ns3=3D"http://docs=2Eoasis-open=2Eorg/wss/200= 4/01/oasis-200401-wss-wssecurity-secext-1=2E0=2Exsd"=0D=0A=0D=0Axmlns:ns2= =3D"http://docs=2Eoasis-open=2Eorg/wss/2004/01/oasis-200401-wss-wssecurity-= utility-1=2E0=2Exsd"=0D=0A xmlns=3D"http://www=2Ew3=2Eorg/2000/09/xmldsig#"= >=0D=0A <ns3:SecurityTokenReference>=0D=0A = <X509Data>=0D=0A <X509IssuerSerial>=0D=0A = <X509IssuerName>CN=3Dsts-ca, OU=3Deng,=0D=0AO=3Diona= =2Ecom</X509IssuerName>=0D=0A <X509SerialNumber>1= 230254082</X509SerialNumber>=0D=0A </X509IssuerSeria= l>=0D=0A </X509Data>=0D=0A </ns3:Secur= ityTokenReference>=0D=0A </KeyInfo>=0D=0A </ds:Sig= nature>=0D=0A </Assertion>=0D=0A </wsse:Security>=0D=0A </so= apenv:Header>=0D=0A <soapenv:Body>=0D=0A <typ:greetMe>=0D=0A = <typ:requestType>dddd</typ:requestType>=0D=0A </typ:greetMe>=0D=0A = </soapenv:Body>=0D=0A</soapenv:Envelope>=0D=0A=0D=0A=0D=0ALog:=0D=0A=0D=0A[= INFO] Caused by: org=2Eapache=2Ews=2Esecurity=2EWSSecurityException: Genera= l=0D=0Asecurity error (SAML token security failure); nested exception is:= =0D=0A[INFO] org=2Eopensaml=2EUnsupportedExtensionException:=0D=0ASAMLStat= ement=2EgetInstance() unable to locate an implementation of specified=0D=0A= statement type=0D=0A[INFO] at=0D=0Aorg=2Eapache=2Ews=2Esecurity=2Eprocesso= r=2ESAMLTokenProcessor=2EhandleSAMLToken=0D=0A(SAMLTokenProcessor=2Ejava:74= )=0D=0A[INFO] at org=2Eapache=2Ews=2Esecurity=2Eprocessor=2ESAMLTokenProce= ssor=2EhandleToken=0D=0A(SAMLTokenProcessor=2Ejava:53)=0D=0A[INFO] at org= =2Eapache=2Ews=2Esecurity=2EWSSecurityEngine=2EprocessSecurityHeader=0D=0A(= WSSecurityEngine=2Ejava:326)=0D=0A[INFO] at org=2Eapache=2Ews=2Esecurity= =2EWSSecurityEngine=2EprocessSecurityHeader=0D=0A(WSSecurityEngine=2Ejava:2= 43)=0D=0A[INFO] at=0D=0Aorg=2Eapache=2Ecxf=2Ews=2Esecurity=2Ewss4j=2EWSS4J= InInterceptor=2EhandleMessage=0D=0A(WSS4JInInterceptor=2Ejava:198)=0D=0A[IN= FO] =2E=2E=2E 18 more=0D=0A[INFO] Caused by: org=2Eopensaml=2EUnsupportedE= xtensionException:=0D=0ASAMLStatement=2EgetInstance() unable to locate an i= mplementation of specified=0D=0Astatement type=0D=0A[INFO] at org=2Eopensa= ml=2ESAMLStatement=2EgetInstance(Unknown Source)=0D=0A[INFO] at org=2Eopen= saml=2ESAMLAssertion=2EfromDOM(Unknown Source)=0D=0A[INFO] at org=2Eopensa= ml=2ESAMLAssertion=2E<init>(Unknown Source)=0D=0A[INFO] at=0D=0Aorg=2Eapac= he=2Ews=2Esecurity=2Eprocessor=2ESAMLTokenProcessor=2EhandleSAMLToken=0D=0A= (SAMLTokenProcessor=2Ejava:68)=0D=0A[INFO] =2E=2E=2E 22 more=0D=0A=0D=0A= =0D=0AThere are only two statements there:=0D=0A<Statement xsi:type=3D"ns3:= AssertionMetadataType"=0D=0Axmlns:xsi=3D"http://www=2Ew3=2Eorg/2001/XMLSche= ma-instance">=0D=0A=2E=2E=2E=0D=0A</Statement>=0D=0A<AttributeStatement>=0D= =0A=2E=2E=2E=0D=0A</AttributeStatement>=0D=0A=0D=0A=0D=0AThanks=0D=0AOli=0D= =0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A******************* BITTE BEACHTEN *= ******************=0D=0ADiese Nachricht (wie auch allf=E4llige Anh=E4nge da= zu) beinhaltet=0D=0Am=F6glicherweise vertrauliche oder gesetzlich gesch=FCt= zte Daten oder=0D=0AInformationen=2E Zum Empfang derselben ist (sind) aussc= hliesslich die=0D=0Agenannte(n) Person(en) bestimmt=2E Falls Sie diese Nach= richt=0D=0Airrt=FCmlicherweise erreicht hat, sind Sie h=F6flich gebeten, di= ese unter=0D=0AAusschluss jeder Reproduktion zu zerst=F6ren und die absende= nde Person=0D=0Aumgehend zu benachrichtigen=2E Vielen Dank f=FCr Ihre Hilfe= =2E=0D=0A --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Thu Oct 15 13:36:48 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 7421 invoked from network); 15 Oct 2009 13:36:47 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Oct 2009 13:36:47 -0000 Received: (qmail 9559 invoked by uid 500); 15 Oct 2009 13:36:47 -0000 Delivered-To: mmoore@example.org Received: (qmail 9446 invoked by uid 500); 15 Oct 2009 13:36:47 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 9437 invoked by uid 99); 15 Oct 2009 13:36:46 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 13:36:46 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [83.161.120.155] (HELO ntmamx1.progress.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 13:36:35 +0000 Received: from ntmamx1.progress.com (83.161.120.155) by ntmamx1.progress.com (MlfMTA v3.2r9) id hqsilu0171sl for <mmoore@example.org>; Thu, 15 Oct 2009 09:36:10 -0400 (envelope-from <mmoore@example.org>) Received: from progress.com ([83.161.120.155]) by ntmamx1.progress.com (SonicWALL 83.161.120.1555) with ESMTP; Thu, 15 Oct 2009 09:36:10 -0400 Received: from NTEXFE02.bedford.progress.com (ntexfe02-lb [83.161.120.155]) by progress.com (8.13.8/8.13.8) with ESMTP id n9FDaEGu019748; Thu, 15 Oct 2009 09:36:14 -0400 (EDT) Received: from MAIL02.bedford.progress.com ([83.161.120.155]) by NTEXFE02.bedford.progress.com with Microsoft SMTPSVC600.530.1854); Thu, 15 Oct 2009 09:36:13 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: SAML processing, unable to locate an implementation of specified statement type Date: Thu, 15 Oct 2009 09:36:11 -0400 Message-ID: <mmoore@example.org> In-Reply-To: <mmoore@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: SAML processing, unable to locate an implementation of specified statement type Thread-Index: AcpNehndCSYp0cxkQzyr4SUijQL99AAIb37g From: "Colm O hEigeartaigh" <mmoore@example.org> To: "Oliver Wulff" <mmoore@example.org>, <mmoore@example.org> X-OriginalArrivalTime: 15 Oct 2009 13:36:13.0862 (UTC) FILETIME=[76E7CC60:01CA4D9C] X-Mlf-Version: 83.161.120.1555 X-Mlf-UniqueId: o200910151336100369063 X-Virus-Checked: Checked by ClamAV on apache.org Hi Oliver, WSS4J does not seem to support processing custom Statement types as per: <Statement xsi:type=3D"ns3:AssertionMetadataType" xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"> <ns3:SessionDuration>0</ns3:SessionDuration> </Statement> Opensaml seems to expect you to register custom types via a call to: org.opensaml.SAMLStatement.regFactory(QName, String) where it attempts to load a class corresponding to the String, which = must accept a DOM element in the constructor. WSS4J currently has no way = to allow you to do call this method, although you could always write = custom code using the WSS4J API's I guess. Colm. -----Original Message----- From: Oliver Wulff [mailto:mmoore@example.org]=20 Sent: 15 October 2009 10:29 To: mmoore@example.org Subject: SAML processing, unable to locate an implementation of = specified statement type <img src=3D"http://zdownload.zurich.com/mailimages/ZHP_MailHeader.gif" /> Hi there I use CXF version 2.2 which uses WSS4J 1.5.8 which itself depends on opensaml 1.1. I've sent the following soap request to a CXF endpoint where the WS-SecurityPolicy enforces an issued token. Unfortunately, I get an = error that the specified statement type is not supported. Example request: <soapenv:Envelope = xmlns:soapenv=3D"http://schemas.xmlsoap.org/soap/envelope/" xmlns:typ=3D"http://apache.org/hello_world_soap_http/types"> <soapenv:Header> <wsse:Security soapenv:mustUnderstand=3D"1" xmlns:wsse=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wss= ecurity-secext-1.0.xsd"> <Assertion MinorVersion=3D"1" MajorVersion=3D"1" = Issuer=3D"Security Token Service" IssueInstant=3D"2009-10-15T08:18:43.832Z" AssertionID=3D"id-f95c6d2d-7586-47d4-8884-f9cc14a52a34" xmlns:ns8=3D"http://schemas.iona.com/saml2" xmlns:ns7=3D"http://www.w3.org/2001/04/xmlenc#" xmlns:ns6=3D"urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns5=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse= curity-secext-1.0.xsd" xmlns:ns4=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse= curity-utility-1.0.xsd" xmlns:ns3=3D"http://schemas.iona.com/saml" xmlns:ns2=3D"http://www.w3.org/2000/09/xmldsig#" xmlns=3D"urn:oasis:names:tc:SAML:1.0:assertion"> <Statement xsi:type=3D"ns3:AssertionMetadataType" xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"> <ns3:SessionDuration>0</ns3:SessionDuration> </Statement> <AttributeStatement> <Subject> <NameIdentifier>alice</NameIdentifier> <SubjectConfirmation> <ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:sender-vouches</Confir= mationMethod> </SubjectConfirmation> </Subject> <Attribute AttributeNamespace=3D"http://schemas.iona.com/soa/security/saml-assertion= -ext.xsd" AttributeName=3D"realms"> <AttributeValue = xsi:type=3D"ns3:RealmAttributeValueType" xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"> <ns3:Realm name=3D"IONAGlobalRealm" desc=3D""> <ns3:Role name=3D"guest" desc=3D""/> </ns3:Realm> <ns3:Realm name=3D"corporate" desc=3D""> <ns3:Role name=3D"president" desc=3D""/> </ns3:Realm> </AttributeValue> </Attribute> </AttributeStatement> <ds:Signature = xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"/> <ds:SignatureMethod Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> <ds:Reference URI=3D"#id-f95c6d2d-7586-47d4-8884-f9cc14a52a34"> <ds:Transforms> <ds:Transform Algorithm=3D"http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> <ds:Transform Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"/> </ds:Transforms> <ds:DigestMethod Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"/> <ds:DigestValue>Km83fx/zBg07cVq6Ef8seyXanu0=3D</ds:DigestValue> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue>S1ZZn10KLokaJ8GvgeUotlPyfxvMWBumQAQyAAaVb1BigZHY7qVHwP= 9XepWTqKZ9g9TQKwEwN4tB TFwAYLNApt4KQcmXazn5NEntxa7RSUwf3ovYcGeAn1bH0Uh35qkVJAPAvuEEefAbMHWVSIxVE= 9dw 8ANENnH+hxdpprQX/Is=3D</ds:SignatureValue> <KeyInfo xmlns:ns3=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse= curity-secext-1.0.xsd" xmlns:ns2=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wsse= curity-utility-1.0.xsd" xmlns=3D"http://www.w3.org/2000/09/xmldsig#"> <ns3:SecurityTokenReference> <X509Data> <X509IssuerSerial> <X509IssuerName>CN=3Dsts-ca, OU=3Deng, O=3Diona.com</X509IssuerName> = <X509SerialNumber>1230254082</X509SerialNumber> </X509IssuerSerial> </X509Data> </ns3:SecurityTokenReference> </KeyInfo> </ds:Signature> </Assertion> </wsse:Security> </soapenv:Header> <soapenv:Body> <typ:greetMe> <typ:requestType>dddd</typ:requestType> </typ:greetMe> </soapenv:Body> </soapenv:Envelope> Log: [INFO] Caused by: org.apache.ws.security.WSSecurityException: General security error (SAML token security failure); nested exception is: [INFO] org.opensaml.UnsupportedExtensionException: SAMLStatement.getInstance() unable to locate an implementation of = specified statement type [INFO] at org.apache.ws.security.processor.SAMLTokenProcessor.handleSAMLToken (SAMLTokenProcessor.java:74) [INFO] at = org.apache.ws.security.processor.SAMLTokenProcessor.handleToken (SAMLTokenProcessor.java:53) [INFO] at org.apache.ws.security.WSSecurityEngine.processSecurityHeader (WSSecurityEngine.java:326) [INFO] at org.apache.ws.security.WSSecurityEngine.processSecurityHeader (WSSecurityEngine.java:243) [INFO] at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage (WSS4JInInterceptor.java:198) [INFO] ... 18 more [INFO] Caused by: org.opensaml.UnsupportedExtensionException: SAMLStatement.getInstance() unable to locate an implementation of = specified statement type [INFO] at org.opensaml.SAMLStatement.getInstance(Unknown Source) [INFO] at org.opensaml.SAMLAssertion.fromDOM(Unknown Source) [INFO] at org.opensaml.SAMLAssertion.<init>(Unknown Source) [INFO] at org.apache.ws.security.processor.SAMLTokenProcessor.handleSAMLToken (SAMLTokenProcessor.java:68) [INFO] ... 22 more There are only two statements there: <Statement xsi:type=3D"ns3:AssertionMetadataType" xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"> ... </Statement> <AttributeStatement> ... </AttributeStatement> Thanks Oli ******************* BITTE BEACHTEN ******************* Diese Nachricht (wie auch allf=E4llige Anh=E4nge dazu) beinhaltet m=F6glicherweise vertrauliche oder gesetzlich gesch=FCtzte Daten oder Informationen. Zum Empfang derselben ist (sind) ausschliesslich die genannte(n) Person(en) bestimmt. Falls Sie diese Nachricht irrt=FCmlicherweise erreicht hat, sind Sie h=F6flich gebeten, diese = unter Ausschluss jeder Reproduktion zu zerst=F6ren und die absendende Person umgehend zu benachrichtigen. Vielen Dank f=FCr Ihre Hilfe. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Thu Oct 15 17:47:38 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 91361 invoked from network); 15 Oct 2009 17:47:38 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Oct 2009 17:47:38 -0000 Received: (qmail 91708 invoked by uid 500); 15 Oct 2009 17:47:38 -0000 Delivered-To: mmoore@example.org Received: (qmail 91592 invoked by uid 500); 15 Oct 2009 17:47:37 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 91583 invoked by uid 99); 15 Oct 2009 17:47:37 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 17:47:37 +0000 X-ASF-Spam-Status: No, hits=-1.0 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of mmoore@example.org designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO TX2EHSOBE006.bigfish.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 17:47:25 +0000 Received: from mail149-tx2-R.bigfish.com (83.161.120.155) by TX2EHSOBE006.bigfish.com (83.161.120.155) with Microsoft SMTP Server id 8.1.340.0; Thu, 15 Oct 2009 17:47:02 +0000 Received: from mail149-tx2 (localhost.localdomain [83.161.120.155]) by mail149-tx2-R.bigfish.com (Postfix) with ESMTP id 26F791AB05FF; Thu, 15 Oct 2009 17:47:02 +0000 (UTC) X-SpamScore: 9 X-BigFish: VPS9(za0filz14ffOzz1202hzz2ba5Mz2ei6bh62h) X-Spam-TCS-SCL: 1:0 Received: by mail149-tx2 (MessageSwitch) id 1255628816576414_14458; Thu, 15 Oct 2009 17:46:56 +0000 (UCT) Received: from TX2EHSMHS029.bigfish.com (unknown [83.161.120.155]) by mail149-tx2.bigfish.com (Postfix) with ESMTP id 86C88F68054; Thu, 15 Oct 2009 17:46:56 +0000 (UTC) Received: from stcexcpsm03.corp.star (83.161.120.155) by TX2EHSMHS029.bigfish.com (83.161.120.155) with Microsoft SMTP Server id 14.0.482.32; Thu, 15 Oct 2009 17:46:54 +0000 Received: from SVOEXCPMB01.corp.star ([83.161.120.155]) by stcexcpsm03.corp.star with Microsoft SMTPSVC600.530.1854); Thu, 15 Oct 2009 13:46:53 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: Help- Geting "Illegal key size or default parameters" running sample program Date: Thu, 15 Oct 2009 13:46:17 -0400 Message-ID: <mmoore@example.org> In-Reply-To: <mmoore@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Help- Geting "Illegal key size or default parameters" running sample program thread-index: AcpNtdETuDL+iwYgTDuyoWi7IVDDQgABjGNA References: <mmoore@example.org> From: "Nagulapalli, Srinivas" <mmoore@example.org> To: <mmoore@example.org> X-OriginalArrivalTime: 15 Oct 2009 17:46:53.0064 (UTC) FILETIME=[7AF7E880:01CA4DBF] X-Reverse-DNS: 4.host.starwoodhotels.com X-Virus-Checked: Checked by ClamAV on apache.org Hi all I get Illegal key size exception (on wsEncrypt.build(doc, crypto)) when trying to run the sample program detailed at: http://www.devx.com/Java/Article/28816/0/page/4 Code, properties file and exception trace are bellow. I am running it as stand alone with wss4j.jar files downloaded, and folder to keystore on classpath (c:\try\keystore). I appreciate greatly any help or pointers Thanks Srini ____________________ public class WSSecuritySample{ private static final String soapMsg =3D "<?xml version=3D\"1.0\" encoding=3D\"UTF-8\"?>" + "<SOAP-ENV:Envelope" + " xmlns:SOAP-ENV=3D\"http://www.w3.org/2003/05/soap-envelope\"\n" + " xmlns:xsd=3D\"http://www.w3.org/2001/XMLSchema\"\n" + " xmlns:xsi=3D\"http://www.w3.org/2001/XMLSchema-instance\">" + " <SOAP-ENV:Body>" + " <sayHello xmlns=3D\"http://jeffhanson.com/services/helloworld\">" + " <value xmlns=3D\"\">Hello world!</value>" + " </sayHello>" + " </SOAP-ENV:Body>" + "</SOAP-ENV:Envelope>"; private static final WSSecurityEngine secEngine =3D new WSSecurityEngine(); private static final Crypto crypto =3D CryptoFactory.getInstance(); private AxisClient engine =3D null; private MessageContext msgContext =3D null; public static void main(String[] args){ try{ WSSecuritySample app =3D new WSSecuritySample(); Message axisMessage =3D app.getAxisMessage(soapMsg); SOAPEnvelope unsignedEnvelope =3D axisMessage.getSOAPEnvelope(); System.out.println("<<<<<< Unsigned and Unencrypted >>>>>>"); XMLUtils.PrettyElementToWriter(unsignedEnvelope.getAsDOM(), = new PrintWriter(System.out)); Message samlMsg =3D app.addUserTokens(unsignedEnvelope); System.out.println("\n<<<<<< User Tokens >>>>>>"); = = XMLUtils.PrettyElementToWriter(samlMsg.getSOAPEnvelope().getAsDOM(), new PrintWriter(System.out)); Message encryptedMsg =3D app.encryptSOAPEnvelope(unsignedEnvelope, axisMessage); System.out.println("\n<<<<<< Encrypted >>>>>>"); = = XMLUtils.PrettyElementToWriter(encryptedMsg.getSOAPEnvelope().getAsDOM() , new PrintWriter(System.out)); Message signedMsg =3D app.signSOAPEnvelope(unsignedEnvelope); System.out.println("\n<<<<<< Signed >>>>>>"); = XMLUtils.PrettyElementToWriter(signedMsg.getSOAPEnvelope().getAsDOM(), new PrintWriter(System.out)); } catch (Exception e){e.printStackTrace();} } public WSSecuritySample(){ engine =3D new AxisClient(new NullProvider()); msgContext =3D new MessageContext(engine); } private Message getAxisMessage(String unsignedEnvelope){ InputStream inStream =3D = new ByteArrayInputStream(unsignedEnvelope.getBytes()); Message axisMessage =3D new Message(inStream); axisMessage.setMessageContext(msgContext); return axisMessage; } public Message signSOAPEnvelope(SOAPEnvelope unsignedEnvelope) throws Exception { WSSignEnvelope signer =3D new WSSignEnvelope(); String alias =3D "16c73ab6-b892-458f-abf5-2f875f74882e"; String password =3D "foobar";//"security"; signer.setUserInfo(alias, password); Document doc =3D unsignedEnvelope.getAsDocument(); Document signedDoc =3D signer.build(doc, crypto); Message signedSOAPMsg =3D (org.apache.axis.Message)toSOAPMessage(signedDoc); return signedSOAPMsg; } public Message addUserTokens(SOAPEnvelope unsignedEnvelope) throws Exception { WSEncryptBody wsEncrypt =3D new WSEncryptBody(); Document doc =3D unsignedEnvelope.getAsDocument(); String username =3D "joedoe"; String password =3D "this is a lot of foobar "; byte[] key =3D password.getBytes(); // Add the UserNameToken. WSSAddUsernameToken builder =3D new WSSAddUsernameToken("", false); builder.setPasswordType(WSConstants.PASSWORD_TEXT); builder.build(doc, username, password); // Add an Id to it. Element usrEle =3D (Element)(doc.getElementsByTagNameNS(WSConstants.WSSE_NS, = "UsernameToken").item(0)); String idValue =3D "7654"; usrEle.setAttribute("Id", idValue); // Create a Reference to the UserNameToken. Reference ref =3D new Reference(doc); ref.setURI("#" + idValue); ref.setValueType("UsernameToken"); SecurityTokenReference secRef =3D new SecurityTokenReference(doc); secRef.setReference(ref); WSSecurityUtil.setNamespace(secRef.getElement(), WSConstants.WSSE_NS, WSConstants.WSSE_PREFIX); = wsEncrypt.setKeyIdentifierType(WSConstants.EMBED_SECURITY_TOKEN_REF); wsEncrypt.setSecurityTokenReference(secRef); wsEncrypt.setKey(key); // LINE BELOW THROWS EXCEPTION FOR ME! Document encDoc =3D wsEncrypt.build(doc, crypto); // Convert the document into a SOAP message. Message signedMsg =3D (Message)toSOAPMessage(encDoc); return signedMsg; } public Message encryptSOAPEnvelope(SOAPEnvelope unsignedEnvelope, Message axisMessage) throws Exception { WSEncryptBody encrypt =3D new WSEncryptBody(); encrypt.setUserInfo("16c73ab6-b892-458f-abf5-2f875f74882e"); Document doc =3D unsignedEnvelope.getAsDocument(); Document encryptedDoc =3D encrypt.build(doc, crypto); Message encryptedMsg =3D (Message)toSOAPMessage(encryptedDoc); String soapPart =3D encryptedMsg.getSOAPPartAsString(); ((SOAPPart)axisMessage.getSOAPPart()).setCurrentMessage(soapPart, = SOAPPart.FORM_STRING); encryptedDoc =3D axisMessage.getSOAPEnvelope().getAsDocument(); Message encryptedSOAPMsg =3D (Message)toSOAPMessage(encryptedDoc); return encryptedSOAPMsg; } = public SOAPMessage toSOAPMessage(Document doc) throws Exception { Canonicalizer c14n =3D Canonicalizer.getInstance(Canonicalizer.ALGO_ID_C14N_WITH_COMMENTS); byte[] canonicalMessage =3D c14n.canonicalizeSubtree(doc); ByteArrayInputStream in =3D new ByteArrayInputStream(canonicalMessage); MessageFactory factory =3D MessageFactory.newInstance(); return factory.createMessage(null, in); } } ________________________________________________ * Created two keystores in a folder: privkeystore and pubcertkeystore = and exported public keys of each into other so both have two entries * Contents of crypto.properties file are below. C:\try\keystore is folder containing privkeystore (and pubcertkeystore) ________________ org.apache.ws.security.crypto.provider=3Dorg.apache.ws.security.components .crypto.Merlin org.apache.ws.security.crypto.merlin.keystore.type=3Djks org.apache.ws.security.crypto.merlin.keystore.password=3Dfoobar org.apache.ws.security.crypto.merlin.keystore.file=3DC://try//keystore//pr ivkeystore ______________________ Exception throws is: org.apache.ws.security.WSSecurityException: Cannot encrypt data; nested exception is: = org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters Original Exception was java.security.InvalidKeyException: Illegal key size or default mmoore@example.org(WSEncryptBody. java:536) at org.apache.ws.security.message.WSEncryptBody.buildEmbedded(WSEncryptBody .java:598) at org.apache.ws.security.message.WSEncryptBody.build(WSEncryptBody.java:29 7) at com.jeffhanson.ws.security.WSSecuritySample.addUserTokens(WSSecuritySamp le.java:238) at com.jeffhanson.ws.security.WSSecuritySample.main(WSSecuritySample.java:1 00) This electronic message transmission contains information from the Company = that may be proprietary, confidential and/or privileged. = The information is intended only for the use of the individual(s) or entity= named above. If you are not the intended recipient, be = aware that any disclosure, copying or distribution or use of the contents o= f this information is prohibited. If you have received = this electronic transmission in error, please notify the sender immediately= by replying to the address listed in the "From:" field. = --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Thu Oct 15 18:46:13 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 15447 invoked from network); 15 Oct 2009 18:46:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Oct 2009 18:46:13 -0000 Received: (qmail 95135 invoked by uid 500); 15 Oct 2009 18:46:13 -0000 Delivered-To: mmoore@example.org Received: (qmail 95032 invoked by uid 500); 15 Oct 2009 18:46:12 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 95023 invoked by uid 99); 15 Oct 2009 18:46:12 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 18:46:12 +0000 X-ASF-Spam-Status: No, hits=-2.6 required=5.0 tests=BAYES_00 X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [83.161.120.155] (HELO fg-out-1718.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 18:46:09 +0000 Received: by fg-out-1718.google.com with SMTP id d23so602839fga.16 for <mmoore@example.org>; Thu, 15 Oct 2009 11:45:47 -0700 (PDT) Received: by 83.161.120.155 with SMTP id b17mr513120fgi.65.1255632346967; Thu, 15 Oct 2009 11:45:46 -0700 (PDT) Received: from ?83.161.120.155? ([83.161.120.155]) by mx.google.com with ESMTPS id d4sm307632fga.11.283.161.120.155.45.42 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 15 Oct 2009 11:45:45 -0700 (PDT) Message-ID: <mmoore@example.org> Date: Fri, 16 Oct 2009 00:15:33 +0530 From: Prabath Siriwardena <mmoore@example.org> Organization: WSO2 User-Agent: Thunderbird 83.161.120.155 (Windows/20090812) MIME-Version: 1.0 To: "Nagulapalli, Srinivas" <mmoore@example.org> CC: mmoore@example.org Subject: Re: Help- Geting "Illegal key size or default parameters" running sample program References: <mmoore@example.org> <mmoore@example.org> In-Reply-To: <mmoore@example.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi; Please have a look at [1]. Thanks & regards. -Prabath [1]:http://blog.rampartfaq.com/2009/08/faq-001-javasecurityinvalidkeyexception.html Nagulapalli, Srinivas wrote: > Hi all > I get Illegal key size exception (on wsEncrypt.build(doc, crypto)) > when trying to run the sample program detailed at: > http://www.devx.com/Java/Article/28816/0/page/4 > > Code, properties file and exception trace are bellow. I am running it as > stand alone with wss4j.jar files downloaded, and folder to keystore on > classpath (c:\try\keystore). > > I appreciate greatly any help or pointers > > Thanks > Srini > > ____________________ > public class WSSecuritySample{ > private static final String soapMsg = > "<?xml version=\"1.0\" encoding=\"UTF-8\"?>" + > "<SOAP-ENV:Envelope" + > " xmlns:SOAP-ENV=\"http://www.w3.org/2003/05/soap-envelope\"\n" > + > " xmlns:xsd=\"http://www.w3.org/2001/XMLSchema\"\n" + > " xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">" + > " <SOAP-ENV:Body>" + > " <sayHello > xmlns=\"http://jeffhanson.com/services/helloworld\">" + > " <value xmlns=\"\">Hello world!</value>" + > " </sayHello>" + > " </SOAP-ENV:Body>" + > "</SOAP-ENV:Envelope>"; > > private static final WSSecurityEngine secEngine = new > WSSecurityEngine(); > private static final Crypto crypto = CryptoFactory.getInstance(); > > private AxisClient engine = null; > private MessageContext msgContext = null; > > public static void main(String[] args){ > try{ > WSSecuritySample app = new WSSecuritySample(); > Message axisMessage = app.getAxisMessage(soapMsg); > SOAPEnvelope unsignedEnvelope = axisMessage.getSOAPEnvelope(); > > System.out.println("<<<<<< Unsigned and Unencrypted >>>>>>"); > XMLUtils.PrettyElementToWriter(unsignedEnvelope.getAsDOM(), > new > PrintWriter(System.out)); > > Message samlMsg = app.addUserTokens(unsignedEnvelope); > System.out.println("\n<<<<<< User Tokens >>>>>>"); > > > XMLUtils.PrettyElementToWriter(samlMsg.getSOAPEnvelope().getAsDOM(), > new PrintWriter(System.out)); > > Message encryptedMsg = > app.encryptSOAPEnvelope(unsignedEnvelope, > axisMessage); > System.out.println("\n<<<<<< Encrypted >>>>>>"); > > > XMLUtils.PrettyElementToWriter(encryptedMsg.getSOAPEnvelope().getAsDOM() > , > new PrintWriter(System.out)); > > Message signedMsg = app.signSOAPEnvelope(unsignedEnvelope); > System.out.println("\n<<<<<< Signed >>>>>>"); > > XMLUtils.PrettyElementToWriter(signedMsg.getSOAPEnvelope().getAsDOM(), > new PrintWriter(System.out)); > > } > catch (Exception e){e.printStackTrace();} > } > > public WSSecuritySample(){ > engine = new AxisClient(new NullProvider()); > msgContext = new MessageContext(engine); > } > > private Message getAxisMessage(String unsignedEnvelope){ > InputStream inStream = > new ByteArrayInputStream(unsignedEnvelope.getBytes()); > Message axisMessage = new Message(inStream); > axisMessage.setMessageContext(msgContext); > return axisMessage; > } > > public Message signSOAPEnvelope(SOAPEnvelope unsignedEnvelope) > throws Exception > { > WSSignEnvelope signer = new WSSignEnvelope(); > > String alias = "16c73ab6-b892-458f-abf5-2f875f74882e"; > String password = "foobar";//"security"; > signer.setUserInfo(alias, password); > > Document doc = unsignedEnvelope.getAsDocument(); > > Document signedDoc = signer.build(doc, crypto); > > Message signedSOAPMsg = > (org.apache.axis.Message)toSOAPMessage(signedDoc); > > return signedSOAPMsg; > } > > public Message addUserTokens(SOAPEnvelope unsignedEnvelope) > throws Exception { > WSEncryptBody wsEncrypt = new WSEncryptBody(); > > Document doc = unsignedEnvelope.getAsDocument(); > > String username = "joedoe"; > String password = "this is a lot of foobar "; > byte[] key = password.getBytes(); > > // Add the UserNameToken. > WSSAddUsernameToken builder = > new WSSAddUsernameToken("", false); > builder.setPasswordType(WSConstants.PASSWORD_TEXT); > builder.build(doc, username, password); > > // Add an Id to it. > Element usrEle = > (Element)(doc.getElementsByTagNameNS(WSConstants.WSSE_NS, > > "UsernameToken").item(0)); > String idValue = "7654"; > usrEle.setAttribute("Id", idValue); > > // Create a Reference to the UserNameToken. > Reference ref = new Reference(doc); > ref.setURI("#" + idValue); > ref.setValueType("UsernameToken"); > SecurityTokenReference secRef = > new SecurityTokenReference(doc); > secRef.setReference(ref); > > WSSecurityUtil.setNamespace(secRef.getElement(), > WSConstants.WSSE_NS, > WSConstants.WSSE_PREFIX); > > > wsEncrypt.setKeyIdentifierType(WSConstants.EMBED_SECURITY_TOKEN_REF); > wsEncrypt.setSecurityTokenReference(secRef); > wsEncrypt.setKey(key); > > // LINE BELOW THROWS EXCEPTION FOR ME! > Document encDoc = wsEncrypt.build(doc, crypto); > > // Convert the document into a SOAP message. > Message signedMsg = (Message)toSOAPMessage(encDoc); > > return signedMsg; > } > > public Message encryptSOAPEnvelope(SOAPEnvelope unsignedEnvelope, > Message axisMessage) > throws Exception { > WSEncryptBody encrypt = new WSEncryptBody(); > encrypt.setUserInfo("16c73ab6-b892-458f-abf5-2f875f74882e"); > > Document doc = unsignedEnvelope.getAsDocument(); > Document encryptedDoc = encrypt.build(doc, crypto); > > Message encryptedMsg = (Message)toSOAPMessage(encryptedDoc); > String soapPart = encryptedMsg.getSOAPPartAsString(); > ((SOAPPart)axisMessage.getSOAPPart()).setCurrentMessage(soapPart, > > SOAPPart.FORM_STRING); > > encryptedDoc = axisMessage.getSOAPEnvelope().getAsDocument(); > > Message encryptedSOAPMsg = (Message)toSOAPMessage(encryptedDoc); > > return encryptedSOAPMsg; > } > > public SOAPMessage toSOAPMessage(Document doc) throws Exception { > Canonicalizer c14n = > Canonicalizer.getInstance(Canonicalizer.ALGO_ID_C14N_WITH_COMMENTS); > byte[] canonicalMessage = c14n.canonicalizeSubtree(doc); > ByteArrayInputStream in = new > ByteArrayInputStream(canonicalMessage); > MessageFactory factory = MessageFactory.newInstance(); > return factory.createMessage(null, in); > } > } > ________________________________________________ > > * Created two keystores in a folder: privkeystore and pubcertkeystore > and exported public keys of each into other so both have two entries > > * Contents of crypto.properties file are below. C:\try\keystore is > folder containing privkeystore (and pubcertkeystore) > ________________ > org.apache.ws.security.crypto.provider=org.apache.ws.security.components > .crypto.Merlin > org.apache.ws.security.crypto.merlin.keystore.type=jks > org.apache.ws.security.crypto.merlin.keystore.password=foobar > org.apache.ws.security.crypto.merlin.keystore.file=C://try//keystore//pr > ivkeystore > ______________________ > Exception throws is: > > org.apache.ws.security.WSSecurityException: Cannot encrypt data; nested > exception is: > org.apache.xml.security.encryption.XMLEncryptionException: > Illegal key size or default parameters > Original Exception was java.security.InvalidKeyException: Illegal key > size or default parameters > at > org.apache.ws.security.message.WSEncryptBody.doEncryption(WSEncryptBody. > java:536) > at > org.apache.ws.security.message.WSEncryptBody.buildEmbedded(WSEncryptBody > .java:598) > at > org.apache.ws.security.message.WSEncryptBody.build(WSEncryptBody.java:29 > 7) > at > com.jeffhanson.ws.security.WSSecuritySample.addUserTokens(WSSecuritySamp > le.java:238) > at > com.jeffhanson.ws.security.WSSecuritySample.main(WSSecuritySample.java:1 > 00) > > This electronic message transmission contains information from the Company that may be proprietary, confidential and/or privileged. > The information is intended only for the use of the individual(s) or entity named above. If you are not the intended recipient, be > aware that any disclosure, copying or distribution or use of the contents of this information is prohibited. If you have received > this electronic transmission in error, please notify the sender immediately by replying to the address listed in the "From:" field. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: mmoore@example.org > For additional commands, e-mail: mmoore@example.org > > > --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Thu Oct 15 18:59:31 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 18754 invoked from network); 15 Oct 2009 18:59:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Oct 2009 18:59:30 -0000 Received: (qmail 13892 invoked by uid 500); 15 Oct 2009 18:59:30 -0000 Delivered-To: mmoore@example.org Received: (qmail 13800 invoked by uid 500); 15 Oct 2009 18:59:30 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 13791 invoked by uid 99); 15 Oct 2009 18:59:30 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 18:59:30 +0000 X-ASF-Spam-Status: No, hits=-1.0 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of mmoore@example.org designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO VA3EHSOBE002.bigfish.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Oct 2009 18:59:19 +0000 Received: from mail136-va3-R.bigfish.com (83.161.120.155) by VA3EHSOBE002.bigfish.com (83.161.120.155) with Microsoft SMTP Server id 8.1.340.0; Thu, 15 Oct 2009 18:58:57 +0000 Received: from mail136-va3 (localhost.localdomain [83.161.120.155]) by mail136-va3-R.bigfish.com (Postfix) with ESMTP id 8C9042E8286; Thu, 15 Oct 2009 18:58:57 +0000 (UTC) X-SpamScore: -21 X-BigFish: VPS-21(za0filz542N1432R98dN14ffO9371Pzz1202hzz2ba5Mz2ei6bh61h) X-Spam-TCS-SCL: 0:0 X-FB-SS: 5, Received: by mail136-va3 (MessageSwitch) id 1255633136196610_32712; Thu, 15 Oct 2009 18:58:56 +0000 (UCT) Received: from VA3EHSMHS026.bigfish.com (unknown [83.161.120.155]) by mail136-va3.bigfish.com (Postfix) with ESMTP id 120089C8052; Thu, 15 Oct 2009 18:58:56 +0000 (UTC) Received: from stcexcpsm03.corp.star (83.161.120.155) by VA3EHSMHS026.bigfish.com (83.161.120.155) with Microsoft SMTP Server id 14.0.482.32; Thu, 15 Oct 2009 18:58:54 +0000 Received: from SVOEXCPMB01.corp.star ([83.161.120.155]) by stcexcpsm03.corp.star with Microsoft SMTPSVC600.530.1854); Thu, 15 Oct 2009 14:58:53 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Help- Geting "Illegal key size or default parameters" running sample program Date: Thu, 15 Oct 2009 14:58:40 -0400 Message-ID: <mmoore@example.org> In-Reply-To: <mmoore@example.org> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Help- Geting "Illegal key size or default parameters" running sample program thread-index: AcpNx7o1BgGCUpbwQnKneVI9GrOyMAAAVikQ References: <mmoore@example.org> <mmoore@example.org> <mmoore@example.org> From: "Nagulapalli, Srinivas" <mmoore@example.org> To: "Prabath Siriwardena" <mmoore@example.org> CC: <mmoore@example.org> X-OriginalArrivalTime: 15 Oct 2009 18:58:53.0536 (UTC) FILETIME=[8A2B9E00:01CA4DC9] X-Reverse-DNS: 4.host.starwoodhotels.com X-Virus-Checked: Checked by ClamAV on apache.org Thanks million Prabath. It resolved that issue. Now I get ClassCastException below- in addUserTokens() method. I appreciate any pointers. Best wishes -Srini java.lang.ClassCastException: com.sun.xml.internal.messaging.saaj.soap.ver1_1.Message1_1Impl cannot be cast to mmoore@example.org(WSSecuritySamp le.java:156) at com.jeffhanson.ws.security.WSSecuritySample.main(WSSecuritySample.java:6 4) -----Original Message----- From: Prabath Siriwardena [mailto:mmoore@example.org] = Sent: Thursday, October 15, 2009 2:46 PM To: Nagulapalli, Srinivas Cc: mmoore@example.org Subject: Re: Help- Geting "Illegal key size or default parameters" running sample program Hi; Please have a look at [1]. Thanks & regards. -Prabath [1]:http://blog.rampartfaq.com/2009/08/faq-001-javasecurityinvalidkeyexc eption.html Nagulapalli, Srinivas wrote: > Hi all > I get Illegal key size exception (on wsEncrypt.build(doc, crypto)) > when trying to run the sample program detailed at: > http://www.devx.com/Java/Article/28816/0/page/4 > > Code, properties file and exception trace are bellow. I am running it as > stand alone with wss4j.jar files downloaded, and folder to keystore on > classpath (c:\try\keystore). > > I appreciate greatly any help or pointers > > Thanks > Srini This electronic message transmission contains information from the Company = that may be proprietary, confidential and/or privileged. = The information is intended only for the use of the individual(s) or entity= named above. If you are not the intended recipient, be = aware that any disclosure, copying or distribution or use of the contents o= f this information is prohibited. If you have received = this electronic transmission in error, please notify the sender immediately= by replying to the address listed in the "From:" field. = --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 11:14:54 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 64094 invoked from network); 16 Oct 2009 11:14:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 11:14:54 -0000 Received: (qmail 30886 invoked by uid 500); 16 Oct 2009 11:14:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 30768 invoked by uid 500); 16 Oct 2009 11:14:53 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 30759 invoked by uid 99); 16 Oct 2009 11:14:53 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:14:53 +0000 X-ASF-Spam-Status: No, hits=-10.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:14:51 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 56401234C04C for <mmoore@example.org>; Fri, 16 Oct 2009 04:14:31 -0700 (PDT) Message-ID: <1836122851.1255691671352.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 04:14:31 -0700 (PDT) From: "Matthias Germann (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Created: (WSS-209) NPE in AbstractCrypto.getCryptoProvider() MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 NPE in AbstractCrypto.getCryptoProvider() ------------------------------------------ Key: WSS-209 URL: https://issues.apache.org/jira/browse/WSS-209 Project: WSS4J Issue Type: Bug Components: WSS4J Core Affects Versions: 1.5.8 Reporter: Matthias Germann Assignee: Ruchith Udayanga Fernando AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor of AbstractCrypto(Properties p) was called with null. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 11:16:55 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 64540 invoked from network); 16 Oct 2009 11:16:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 11:16:54 -0000 Received: (qmail 32544 invoked by uid 500); 16 Oct 2009 11:16:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 32465 invoked by uid 500); 16 Oct 2009 11:16:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 32456 invoked by uid 99); 16 Oct 2009 11:16:54 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:16:54 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:16:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 69EFF234C1E9 for <mmoore@example.org>; Fri, 16 Oct 2009 04:16:31 -0700 (PDT) Message-ID: <1461481811.1255691791432.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 04:16:31 -0700 (PDT) From: "Matthias Germann (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-209) NPE in AbstractCrypto.getCryptoProvider() In-Reply-To: <1836122851.1255691671352.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/WSS-209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matthias Germann updated WSS-209: --------------------------------- Attachment: AbstractCrypto.java.patch Patch > NPE in AbstractCrypto.getCryptoProvider() > ------------------------------------------ > > Key: WSS-209 > URL: https://issues.apache.org/jira/browse/WSS-209 > Project: WSS4J > Issue Type: Bug > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Matthias Germann > Assignee: Ruchith Udayanga Fernando > Attachments: AbstractCrypto.java.patch > > > AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor of AbstractCrypto(Properties p) was called with null. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 11:20:55 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 65251 invoked from network); 16 Oct 2009 11:20:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 11:20:54 -0000 Received: (qmail 34952 invoked by uid 500); 16 Oct 2009 11:20:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 34835 invoked by uid 500); 16 Oct 2009 11:20:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 34826 invoked by uid 99); 16 Oct 2009 11:20:54 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:20:54 +0000 X-ASF-Spam-Status: No, hits=-10.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:20:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id E7C8F234C1E9 for <mmoore@example.org>; Fri, 16 Oct 2009 04:20:31 -0700 (PDT) Message-ID: <1382374896.1255692031948.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 04:20:31 -0700 (PDT) From: "Matthias Germann (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-209) NPE in AbstractCrypto.getCryptoProvider() In-Reply-To: <1836122851.1255691671352.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/WSS-209?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matthias Germann updated WSS-209: --------------------------------- Description: AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor AbstractCrypto(Properties p) was called with null. (was: AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor of AbstractCrypto(Properties p) was called with null. ) > NPE in AbstractCrypto.getCryptoProvider() > ------------------------------------------ > > Key: WSS-209 > URL: https://issues.apache.org/jira/browse/WSS-209 > Project: WSS4J > Issue Type: Bug > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Matthias Germann > Assignee: Ruchith Udayanga Fernando > Attachments: AbstractCrypto.java.patch > > > AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor AbstractCrypto(Properties p) was called with null. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 11:26:54 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 66181 invoked from network); 16 Oct 2009 11:26:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 11:26:54 -0000 Received: (qmail 37537 invoked by uid 500); 16 Oct 2009 11:26:53 -0000 Delivered-To: mmoore@example.org Received: (qmail 37417 invoked by uid 500); 16 Oct 2009 11:26:53 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 37408 invoked by uid 99); 16 Oct 2009 11:26:53 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:26:53 +0000 X-ASF-Spam-Status: No, hits=-10.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:26:51 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 6249E234C1F2 for <mmoore@example.org>; Fri, 16 Oct 2009 04:26:31 -0700 (PDT) Message-ID: <349210311.1255692391401.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 04:26:31 -0700 (PDT) From: "Matthias Germann (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-210) NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias In-Reply-To: <425340696.1255692391354.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/WSS-210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Matthias Germann updated WSS-210: --------------------------------- Attachment: CryptoBase.java.patch Patch > NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias > ---------------------------------------------------------------------------------------------------------------------- > > Key: WSS-210 > URL: https://issues.apache.org/jira/browse/WSS-210 > Project: WSS4J > Issue Type: Bug > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Matthias Germann > Assignee: Ruchith Udayanga Fernando > Attachments: CryptoBase.java.patch > > > CryptoBase.getAliasForX509Cert(Certificate cert) throws a NullPointerException if the Keystore does not contain a Certificate entry for each alias (i.e. if it contains also a SecretKey). -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 11:26:55 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 66307 invoked from network); 16 Oct 2009 11:26:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 11:26:54 -0000 Received: (qmail 37824 invoked by uid 500); 16 Oct 2009 11:26:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 37733 invoked by uid 500); 16 Oct 2009 11:26:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 37724 invoked by uid 99); 16 Oct 2009 11:26:54 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:26:54 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 11:26:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 56EC5234C04C for <mmoore@example.org>; Fri, 16 Oct 2009 04:26:31 -0700 (PDT) Message-ID: <425340696.1255692391354.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 04:26:31 -0700 (PDT) From: "Matthias Germann (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Created: (WSS-210) NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias ---------------------------------------------------------------------------------------------------------------------- Key: WSS-210 URL: https://issues.apache.org/jira/browse/WSS-210 Project: WSS4J Issue Type: Bug Components: WSS4J Core Affects Versions: 1.5.8 Reporter: Matthias Germann Assignee: Ruchith Udayanga Fernando Attachments: CryptoBase.java.patch CryptoBase.getAliasForX509Cert(Certificate cert) throws a NullPointerException if the Keystore does not contain a Certificate entry for each alias (i.e. if it contains also a SecretKey). -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 16:03:54 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 62767 invoked from network); 16 Oct 2009 16:03:54 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 16:03:54 -0000 Received: (qmail 88868 invoked by uid 500); 16 Oct 2009 16:03:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 88763 invoked by uid 500); 16 Oct 2009 16:03:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 88754 invoked by uid 99); 16 Oct 2009 16:03:53 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:03:53 +0000 X-ASF-Spam-Status: No, hits=-10.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:03:51 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 6692D234C04C for <mmoore@example.org>; Fri, 16 Oct 2009 09:03:31 -0700 (PDT) Message-ID: <744669620.1255709011418.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 09:03:31 -0700 (PDT) From: "Colm O hEigeartaigh (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Commented: (WSS-209) NPE in AbstractCrypto.getCryptoProvider() In-Reply-To: <1836122851.1255691671352.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/WSS-209?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12766571#action_12766571 ] Colm O hEigeartaigh commented on WSS-209: ----------------------------------------- Hi Matthias, What scenario did you run into this problem in? Colm. > NPE in AbstractCrypto.getCryptoProvider() > ------------------------------------------ > > Key: WSS-209 > URL: https://issues.apache.org/jira/browse/WSS-209 > Project: WSS4J > Issue Type: Bug > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Matthias Germann > Assignee: Ruchith Udayanga Fernando > Attachments: AbstractCrypto.java.patch > > > AbstractCrypto.getCryptoProvider() throws a NullPointerException when the constructor AbstractCrypto(Properties p) was called with null. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 16:09:55 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 64822 invoked from network); 16 Oct 2009 16:09:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 16:09:55 -0000 Received: (qmail 99363 invoked by uid 500); 16 Oct 2009 16:09:55 -0000 Delivered-To: mmoore@example.org Received: (qmail 99257 invoked by uid 500); 16 Oct 2009 16:09:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 99248 invoked by uid 99); 16 Oct 2009 16:09:54 -0000 Received: from nike.apache.org (HELO nike.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:09:54 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:09:52 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 7256A234C1E9 for <mmoore@example.org>; Fri, 16 Oct 2009 09:09:31 -0700 (PDT) Message-ID: <600.530.1854.1255709371467.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 09:09:31 -0700 (PDT) From: "Colm O hEigeartaigh (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-210) NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias In-Reply-To: <425340696.1255692391354.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/WSS-210?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-210: ------------------------------------ Fix Version/s: 1.6 1.5.9 Assignee: Colm O hEigeartaigh (was: Ruchith Udayanga Fernando) Looks like this effects a few more methods in CryptoBase. > NPE in CryptoBase.getAliasForX509Cert(Certificate cert) if Keystore does not contain a Certifcate entry for each alias > ---------------------------------------------------------------------------------------------------------------------- > > Key: WSS-210 > URL: https://issues.apache.org/jira/browse/WSS-210 > Project: WSS4J > Issue Type: Bug > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Matthias Germann > Assignee: Colm O hEigeartaigh > Fix For: 1.5.9, 1.6 > > Attachments: CryptoBase.java.patch > > > CryptoBase.getAliasForX509Cert(Certificate cert) throws a NullPointerException if the Keystore does not contain a Certificate entry for each alias (i.e. if it contains also a SecretKey). -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 16:11:55 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 66149 invoked from network); 16 Oct 2009 16:11:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 16:11:55 -0000 Received: (qmail 2617 invoked by uid 500); 16 Oct 2009 16:11:54 -0000 Delivered-To: mmoore@example.org Received: (qmail 2495 invoked by uid 500); 16 Oct 2009 16:11:54 -0000 Mailing-List: contact mmoore@example.org; run by ezmlm Precedence: bulk List-Help: <mailto:mmoore@example.org> List-Unsubscribe: <mailto:mmoore@example.org> List-Post: <mailto:mmoore@example.org> List-Id: <wss4j-dev.ws.apache.org> Delivered-To: mailing list mmoore@example.org Received: (qmail 2322 invoked by uid 99); 16 Oct 2009 16:11:54 -0000 Received: from athena.apache.org (HELO athena.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:11:54 +0000 X-ASF-Spam-Status: No, hits=-10.5 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_HI X-Spam-Check-By: apache.org Received: from [83.161.120.155] (HELO brutus.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Oct 2009 16:11:51 +0000 Received: from brutus (localhost [83.161.120.155]) by brutus.apache.org (Postfix) with ESMTP id 65E72234C1F2 for <mmoore@example.org>; Fri, 16 Oct 2009 09:11:31 -0700 (PDT) Message-ID: <617227905.1255709491416.JavaMail.jira@brutus> Date: Fri, 16 Oct 2009 09:11:31 -0700 (PDT) From: "Colm O hEigeartaigh (JIRA)" <mmoore@example.org> To: mmoore@example.org Subject: [jira] Updated: (WSS-204) Support validating SAML 2.0 tokens In-Reply-To: <930063520.1249579694835.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/WSS-204?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-204: ------------------------------------ Fix Version/s: 1.6 1.5.9 Assignee: Colm O hEigeartaigh (was: Ruchith Udayanga Fernando) > Support validating SAML 2.0 tokens > ---------------------------------- > > Key: WSS-204 > URL: https://issues.apache.org/jira/browse/WSS-204 > Project: WSS4J > Issue Type: New Feature > Components: WSS4J Core > Affects Versions: 1.5.8 > Reporter: Thilina Buddhika > Assignee: Colm O hEigeartaigh > Fix For: 1.5.9, 1.6 > > Attachments: wss4j.patch > > > With the patch submitted for Rampart-231, SAML 2.0 support will be available for Rampart. That patch only generates SAML 2.0 tokens as per the SAML Token Profile 1.1 specification. SAML 2.0 validation support is mandatory for the full completion of SAML 2.0 support in Rampart. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: mmoore@example.org For additional commands, e-mail: mmoore@example.org From mmoore@example.org Fri Oct 16 16:13:57 2009 Return-Path: <mmoore@example.org> Delivered-To: mmoore@example.org Received: (qmail 66774 invoked from network); 16 Oct 2009 16:13:57 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 16 Oct 2009 16:13:57 -0000 Received: (qmail 5000 invoked by uid 500); 16 Oct 2009 16:13:57 -0000 Delivered-To: mmoore@example.org Received: (qmail 4889 invoked by uid 500); 16 Oct 2009 16:13:57 -0000 Mailing-List: contact mmoore@example.org; run by
{'source': 'Apache Software Foundation Public Mail Archives'}