axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Atul (JIRA)" <j...@apache.org>
Subject [jira] Created: (AXIS2-4852) EncryptedData in body throws mustunderstand exception
Date Fri, 15 Oct 2010 04:45:34 GMT
EncryptedData in body throws mustunderstand exception
-----------------------------------------------------

                 Key: AXIS2-4852
                 URL: https://issues.apache.org/jira/browse/AXIS2-4852
             Project: Axis2
          Issue Type: Bug
          Components: jaxws
            Reporter: Atul


Hi,

I am writing a jaxws handler that handles the security for my webservices. In cases where
my body is encrypted, as per ws-security guidelinesi am seeing the excepton "mustunderstand
". While in cases my body is not encrypted , i see that soap message is correclty processed.
I want my handler to be invoked  for soap body to be decrypted.i debugged the code and it
seems it never reaches my handler despite the fact that i have specified/implemented getHeaders()
method correctly. i want to figure out a way by means of which it reaches my jaxws handler.
Sample soap message is ---

<S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/">
   <S:Header>
      <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
S:mustUnderstand="true">
         <wsse:BinarySecurityToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1"
wsu:Id="BST-Vpz9EP4NRbaj6eFvee7pXw22">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</wsse:BinarySecurityToken>
         <xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">
            <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
               <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
            </xenc:EncryptionMethod>
            <dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
               <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
                  <wsse:Reference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
URI="#BST-Vpz9EP4NRbaj6eFvee7pXw22" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1"/>
               </wsse:SecurityTokenReference>
            </dsig:KeyInfo>
            <xenc:CipherData>
               <xenc:CipherValue>fjI4I5s6F7j0eIHXi06nHZSet6IPH2fF/Fc29JnIDAN3KlASphfuHeLhIJVUQdMLzxqK8n3pxBq0l5cv82J9FhbNdM2su11makHg0sSKFwAal5fwtINuKelDYvywZNcQvXnpE3nfeaCzHMzQYWMhM2dHtg2CEh3UqTe4puek/QA=</xenc:CipherValue>
            </xenc:CipherData>
            <xenc:ReferenceList>
               <xenc:DataReference URI="#_mKGRto58v1Ii2r7JqYgemg22"/>
               <xenc:DataReference URI="#_WxdAqWZWErJW87tKCz7FSA22"/>
            </xenc:ReferenceList>
         </xenc:EncryptedKey>
         <wsu:Timestamp xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="Timestamp-8IUl3DY6c1ZUyivMre98zQ22">
            <wsu:Created>2010-10-07T15:40:44Z</wsu:Created>
            <wsu:Expires>2010-10-07T23:40:44Z</wsu:Expires>
         </wsu:Timestamp>
         <wsse:BinarySecurityToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1"
wsu:Id="BST-7mr5wZEhA2dm3Ds1dEvhGg22">MIICLjCCAZcCBEjiSZEwDQYJKoZIhvcNAQEFBQAwXjELMAkGA1UEBhMCVVMxDzANBgNVBAoTBk9yYWNsZTErMCkGA1UECxMiSjJFRSBUZXN0IEVuY3J5cHRpb24gUHVycG9zZXMgT25seTERMA8GA1UEAxMId2VibG9naWMwHhcNMDgwOTMwMTU0NTIxWhcNMTgwODA5MTU0NTIxWjBeMQswCQYDVQQGEwJVUzEPMA0GA1UEChMGT3JhY2xlMSswKQYDVQQLEyJKMkVFIFRlc3QgRW5jcnlwdGlvbiBQdXJwb3NlcyBPbmx5MREwDwYDVQQDEwh3ZWJsb2dpYzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAq7+NVbxFO+IvuGb9RbkYVjDSMM3wfwyenmKGgxyC8sQq3CIwAdYSFBJX4ugUw8ghsz8P66d7fCGypQAjkV/WaTu9HWbw+R0OzkZXd+ze6K+MLVsdjZl3tAhDectMs993RWOP/RAQFiThEtw1w53Qd7/KeB2J1XKGxLb+vBNe0RkCAwEAATANBgkqhkiG9w0BAQUFAAOBgQCkKtPvXhmB7LFJGA7JsT50/Ge8vfVDLhVQLOE6g9G0jDWN1GVeN7ahPJqYWxQzp7hmvmrqwuSz2fJtPyxE7dNBw1DsencYav/AtUYHAHgwtRJET9bBZ1vtFyn38axiURtk+T/oKWuNPb0PcWKCCMoc+x58E1HcvFOTobOiDrw4JQ==</wsse:BinarySecurityToken>
         <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_WxdAqWZWErJW87tKCz7FSA22"
Type="http://www.w3.org/2001/04/xmlenc#Element">
            <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
            <xenc:CipherData>
               <xenc:CipherValue>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</xenc:CipherValue>
            </xenc:CipherData>
         </xenc:EncryptedData>
         <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
            <dsig:SignedInfo>
               <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
               <dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
               <dsig:Reference URI="#Timestamp-8IUl3DY6c1ZUyivMre98zQ22">
                  <dsig:Transforms>
                     <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                  </dsig:Transforms>
                  <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                  <dsig:DigestValue>5+nxC4d6eaCqloQT9TtZuB4/yU0=</dsig:DigestValue>
               </dsig:Reference>
               <dsig:Reference URI="#UsernameToken-lwFAU1MrP56xCiry0FHIyQ22">
                  <dsig:Transforms>
                     <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                  </dsig:Transforms>
                  <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                  <dsig:DigestValue>o+UOhtjP03/GirC2HXmRv6G3xWk=</dsig:DigestValue>
               </dsig:Reference>
               <dsig:Reference URI="#Body-Qb70Er2Vw3UOmePVwQ1WoQ22">
                  <dsig:Transforms>
                     <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
                  </dsig:Transforms>
                  <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
                  <dsig:DigestValue>9YtzdbmCi8ay1UT62QlOCBgs62w=</dsig:DigestValue>
               </dsig:Reference>
            </dsig:SignedInfo>
            <dsig:SignatureValue>da1TNn7L57kyhry7sfkwKELf1MQViczU7///RM9tPc6gk2dx+78JzPKaDSl4ooFQsUUk82ZMw4clkAhyFDwp/pUjY3AhHKiC1CdvLtvIKxufbDKjb24j7JUMPwKztOXL2dw+Hrn8YjqwhqdVptW/QSorCEaT7+jdrvEw437ibJ0=</dsig:SignatureValue>
            <dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Id="KeyInfo-bMB6qO8GwSby3WDdBq98sg22">
               <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
                  <wsse:Reference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
URI="#BST-7mr5wZEhA2dm3Ds1dEvhGg22" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v1"/>
               </wsse:SecurityTokenReference>
            </dsig:KeyInfo>
         </dsig:Signature>
      </wsse:Security>
   </S:Header>
   <S:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="Body-Qb70Er2Vw3UOmePVwQ1WoQ22">
      <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_mKGRto58v1Ii2r7JqYgemg22"
Type="http://www.w3.org/2001/04/xmlenc#Content">
         <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
         <xenc:CipherData>
            <xenc:CipherValue>ZiCxMQsJBMA/HyOBsD7CCi3UgBrTBIWwJpQin6Fi6eCwP1onslA0A6ZzpeHiY8Z/QzAFNAjlusEBgLb8IkHLqs4VhvLWnNxSma2YSoH1tmDhzCISQWl4Ht1gfe4ezUQ0+pkDXOaFrIjAhsyTGKc/BezfB24JNFNNdI8KXdRvg4v7Nqv5dIoDF+F2SxYNDNYdXRvWZTnvoRSNb1ceU+NxeKuG6TxzkYCs0cFlRATFsHOxVp1dsUKVyZbHn97Gr4JcW+EdOa9vNoxqhHH49bCZ0yOFq8zyVYab4geweyyvR8QXF/F7RVfiDOdrkowrSXOJ5ayXjvSffyjDmPZ1HWdSo8QNpueMhWOqcEFM0GTidK4=</xenc:CipherValue>
         </xenc:CipherData>
      </xenc:EncryptedData>
   </S:Body>
</S:Envelope>

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org


Mime
View raw message