Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-740

XML-Signature and XML-Encryption with weblogic

    Details

    • Type: Story
    • Status: Closed
    • Priority: Blocker
    • Resolution: Complete
    • Affects Version/s: 2.0.3
    • Fix Version/s: None
    • Component/s: Security
    • Labels:
      None
    • Environment:
      Weblogic 10.3

      Description

      I've implemented a web service with XML-Signature and XML-Encryption as validation and securement actions. When it is deployed on Tomcat, there's no problem, the web service works well but when deployed on weblogic, I get the following exception :

      17:17:27.324 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.s.w.s.s.w.Wss4jSecurityInterceptor - Validating message [SaajSoapMessage {http://www.w3.org/2001/04/xmlenc#}EncryptedData] with actions [Signature Encrypt]
      17:17:27.332 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.a.ws.security.WSSecurityEngine - enter processSecurityHeader()
      17:17:27.334 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.a.ws.security.WSSecurityEngine - Processing WS-Security header for '' actor.
      17:17:27.335 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.a.w.s.p.EncryptedKeyProcessor - Found encrypted key element
      17:17:27.336 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.a.x.security.algorithms.JCEMapper - Request for URI http://www.w3.org/2001/04/xmlenc#rsa-1_5
      17:17:27.340 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.a.xml.security.utils.ElementProxy - setElement("ds:X509IssuerSerial", "")
      17:17:27.346 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] WARN  o.s.w.s.s.w.Wss4jSecurityInterceptor - Could not validate request: Referenced security token could not be retrieved (Reference "Issuer/Serial data element missing"); nested exception is: 
      	org.apache.xml.security.exceptions.XMLSecurityException: Cannot create a http://www.w3.org/2000/09/xmldsig#:X509IssuerSerial from a http://www.w3.org/2000/09/xmldsig#:X509IssuerSerial element; nested exception is org.apache.ws.security.WSSecurityException: Referenced security token could not be retrieved (Reference "Issuer/Serial data element missing"); nested exception is: 
      	org.apache.xml.security.exceptions.XMLSecurityException: Cannot create a http://www.w3.org/2000/09/xmldsig#:X509IssuerSerial from a http://www.w3.org/2000/09/xmldsig#:X509IssuerSerial element
      17:17:27.346 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG o.s.w.s.s.w.Wss4jSecurityInterceptor - No exception resolver present, creating basic soap fault
      

      I tried to register to the forum to post this question but the image verification is not displayed on my firefox so I can't finalize my registration on spring forums...

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              abarre Arnaud BARRE
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: