Mailing-List: contact java-dev-help@axis.apache.org; run by ezmlm
Precedence: bulk
Reply-To: java-dev@axis.apache.org
Received-SPF: pass (nike.apache.org: domain of abzno1@gmail.com designates
 209.85.216.45 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type:content-transfer-encoding;
        b=lx3J5oCCsBcwCncwDknfLG4NvYsT0C2hmojvM2It1bsbg7sfpgNv0w8OdAVrXJr5l7
         LVRM8FAYa/M2lm/5nyYo5GaXLIFfXSYtPZXwEVol+8D/Hjo3JVyPJKeFH+qLKv+qLMav
         MgSPSgNV8AnGByDfCOQ2Kp2Zzn1ILYHl8HZ54=
MIME-Version: 1.0
In-Reply-To: <AANLkTinhiyxoRmbah6T8eb70o64C16MkUP=3Y2QDqLVr@mail.gmail.com>
References: <AANLkTi=m8_M_BuNVaABPT6+5Y6hLMPC68iu42d9jr4-i@mail.gmail.com>
 <AANLkTi=JNJozifOD6r96sr9x89koqu41KWHbCESU_m-g@mail.gmail.com>
 <AANLkTinL5X240o9YLpVJfrqjaKaQ9EPKZoXk2vS3UmQe@mail.gmail.com>
 <AANLkTimHgGOQ1_jUtQuxaYmuwg3E0CjsRka7XtpN+JTv@mail.gmail.com>
 <AANLkTinhiyxoRmbah6T8eb70o64C16MkUP=3Y2QDqLVr@mail.gmail.com>
From: "Abid K." <abzno1@gmail.com>
Date: Tue, 25 Jan 2011 17:45:37 +0000
Message-ID: <AANLkTim-krNpeSVcv3ojgGdbEB5Jx2Pn2PY-V11vGS_1@mail.gmail.com>
Subject: Re: .net and axis2/rampart
To: java-dev@axis.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi all,

A little more information. My client has said they do the following in
.net to setup the client:

-----------
proxyClient.ClientCredentials.ClientCertificate.SetCertificate(System.Secur=
ity.Cryptography.X509Certificates.StoreLocation.CurrentUser,

    System.Security.Cryptography.X509Certificates.StoreName.My,

    System.Security.Cryptography.X509Certificates.X509FindType.FindBySubjec=
tName,

    "John Doe");
-----------

Does anyone know how I can mimic this in Rampart configuration? or how
I can change the request to contain the John Doe subject name?

Thanks

On 25 January 2011 14:37, Abid K. <abzno1@gmail.com> wrote:
> Hi,
>
> It seems the client cannot find the key with the value
> 'a7e24d986ef9fdef06efd76fb33825d502279e95'. Is it possible to specify
> the key name to something else? I think the client has given it a
> proper name.
>
> Thanks
>
> On 24 January 2011 14:11, Thilina Mahesh Buddhika <thilinamb@gmail.com> w=
rote:
>> It looks like the certificate used by client for signing/encrypting the
>> message is not available in the key store of the service''s end.
>> Also check the key store configurations of the service's end whether the=
y
>> are referring to the correct key store, etc.
>> Thanks,
>> Thilina
>> Thilina Mahesh Buddhika
>> http://blog.thilinamb.com
>>
>>
>> On Mon, Jan 24, 2011 at 4:46 PM, Abid K. <abzno1@gmail.com> wrote:
>>>
>>> Sorry for not replying sooner. The client receives the following error.=
..
>>>
>>> -----------
>>> Cannot find the X.509 certificate using the following search criteria:
>>> StoreName 'My', StoreLocation 'LocalMachine', FindType
>>> 'FindByThumbprint', FindValue
>>> 'a7e24d986ef9fdef06efd76fb33825d502279e95'.. ---&amp;gt;
>>> System.InvalidOperationException: Cannot find the X.509 certificate
>>> using the following search criteria: StoreName 'My', StoreLocation
>>> 'LocalMachine', FindType 'FindByThumbprint', FindValue
>>> 'a7e24d986ef9fdef06efd76fb33825d502279e95'.
>>> -----------
>>>
>>> The value 'a7e24d986ef9fdef06efd76fb33825d502279e95' is the SHA1 value
>>> for the certificate that seems to be used for signing the message on
>>> the client side and I assume this is then being passed to the service
>>> for verification.
>>>
>>> It seems the key cannot be found on the service side, but do you think
>>> I need to change something on the client side?
>>>
>>> Thanks
>>>
>>> On 20 January 2011 04:14, Thilina Mahesh Buddhika <thilinamb@gmail.com>
>>> wrote:
>>> > Hi,
>>> >
>>> > It seems like the service has thrown an error when trying to process =
the
>>> > secured request. The message being logged at RampartReceiver has the
>>> > fault
>>> > message 'An error occurred when verifying security for the
>>> > message'.
>>> >
>>> > If you can check the logs at service end, it would provide the actual
>>> > reason
>>> > for the error.
>>> >
>>> > Thanks,
>>> > Thilina
>>> >
>>> > Thilina Mahesh Buddhika
>>> > http://blog.thilinamb.com
>>> >
>>> >
>>> > On Wed, Jan 19, 2011 at 10:12 PM, Abid K. <abzno1@gmail.com> wrote:
>>> >>
>>> >> Hi, I have created a client app using Axis2/Rampart and I'm having
>>> >> difficulties getting it to work with .net/WCF(I think).
>>> >>
>>> >> My axis2.xml config contains (Also tried policy with same results):
>>> >> ...
>>> >> =A0 <parameter name=3D"OutflowSecurity">
>>> >> =A0 =A0 =A0<action>
>>> >> =A0 =A0 =A0 =A0<items>Signature</items>
>>> >> =A0 =A0 =A0 =A0<user>user</user>
>>> >> =A0 =A0 =A0 =A0<passwordCallbackClass>PWCBHandler</passwordCallbackC=
lass>
>>> >> =A0 =A0 =A0 =A0<signaturePropFile>client.properties</signaturePropFi=
le>
>>> >> =A0 =A0 =A0 =A0<signatureKeyIdentifier>DirectReference</signatureKey=
Identifier>
>>> >> =A0 =A0 =A0</action>
>>> >> =A0 =A0</parameter>
>>> >> ... etc.
>>> >>
>>> >> client.properties:
>>> >>
>>> >>
>>> >> org.apache.ws.security.crypto.provider=3Dorg.apache.ws.security.comp=
onents.crypto.Merlin
>>> >> org.apache.ws.security.crypto.merlin.keystore.type=3Dpkcs12
>>> >> org.apache.ws.security.crypto.merlin.file=3Dkey.pfx
>>> >> org.apache.ws.security.crypto.merlin.keystore.password=3Dpassword
>>> >>
>>> >>
>>> >> I get the follow error:
>>> >> org.apache.axis2.AxisFault: An error occurred when verifying securit=
y
>>> >> for the message.
>>> >> =A0 =A0 =A0 =A0at
>>> >>
>>> >> org.apache.axis2.util.Utils.getInboundFaultFromMessageContext(Utils.=
java:512)
>>> >> =A0 =A0 =A0 =A0at
>>> >>
>>> >> org.apache.axis2.description.OutInAxisOperationClient.handleResponse=
(OutInAxisOperation.java:370)
>>> >> =A0 =A0 =A0 =A0at
>>> >>
>>> >> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxis=
Operation.java:416)
>>> >>
>>> >> Also get the following in the log:
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] Request body sent
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "HTTP/1.1 500 Internal Server
>>> >> Error[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "HTTP/1.1 500 Internal Server
>>> >> Error[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Date: Wed, 19 Jan 2011 16:02:=
39
>>> >> GMT[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Server:
>>> >> Microsoft-IIS/6.0[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "X-Powered-By: ASP.NET[\r][\n]=
"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "X-AspNet-Version:
>>> >> 2.0.50727[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Connection: close[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Cache-Control: private[\r][\n=
]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Content-Type:
>>> >> application/soap+xml; charset=3Dutf-8[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "Content-Length: 643[\r][\n]"
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] << "[\r][\n]"
>>> >> ...
>>> >> 2011-01-19 16:02:38 [main] [DEBUG] ***********************
>>> >> RampartReceiver received
>>> >> <?xml version=3D'1.0' encoding=3D'utf-8'?><s:Envelope
>>> >> xmlns:s=3D"http://www.w3.org/2003/05/soap-envelope"
>>> >> xmlns:a=3D"http://www.w3.org/2005/08/addressing"><s:Header><a:Action
>>> >>
>>> >>
>>> >> s:mustUnderstand=3D"1">http://www.w3.org/2005/08/addressing/soap/fau=
lt</a:Action><a:RelatesTo>urn:uuid:C18F4C3E6ACADFD1F31295452955592</a:Relat=
esTo></s:Header><s:Body><s:Fault><s:Code><s:Value>s:Sender</s:Value><s:Subc=
ode><s:Value
>>> >>
>>> >>
>>> >> xmlns:a=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-w=
ssecurity-secext-1.0.xsd">a:InvalidSecurity</s:Value></s:Subcode></s:Code><=
s:Reason><s:Text
>>> >> xml:lang=3D"en-GB">An error occurred when verifying security for the
>>> >> message.</s:Text></s:Reason></s:Fault></s:Body></s:Envelope>
>>> >>
>>> >>
>>> >> I've carried out an internet search but get no definitive answer and
>>> >> I'm hoping someone here can help.
>>> >>
>>> >> --------------------------------------------------------------------=
-
>>> >> To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
>>> >> For additional commands, e-mail: java-dev-help@axis.apache.org
>>> >>
>>> >
>>> >
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
>>> For additional commands, e-mail: java-dev-help@axis.apache.org
>>>
>>
>>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org